https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T05:02:52.298683+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-03752 bdu:2021-03752 2026-10-04T05:02:52.592462+00:00 bdu:2021-03752 https://cve.radiocsirt.org/vuln/bell-cve-2021-36373 Withdrawn: BELL-CVE-2021-36373 — CVE-2021-36373 does not affect BellSoft software 2026-10-04T05:02:52.592505+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2024-avi-0324 certfr-2024-avi-0324 — De multiples vulnérabilités ont été découvertes dans Oracle Systems. Certaines d'entre elles permettent à un attaquant… 2026-10-04T05:02:52.592526+00:00 certfr-2024-avi-0324 https://cve.radiocsirt.org/vuln/cleanstart-2025-yd79563 CLEANSTART-2025-YD79563 — When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that f… 2026-10-04T05:02:52.592543+00:00

Affected: CleanStart: apache-ant

Security vulnerability affects the apache-ant package. When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs.

 https://cve.radiocsirt.org/vuln/cnvd-2021-51427 cnvd-2021-51427 2026-10-04T05:02:52.592575+00:00 cnvd-2021-51427 https://cve.radiocsirt.org/vuln/euvd-2026-29376 EUVD-2026-29376 2026-10-04T05:02:52.592588+00:00 EUVD-2026-29376 https://cve.radiocsirt.org/vuln/fkie_cve-2021-36373 fkie_cve-2021-36373 2026-10-04T05:02:52.592598+00:00

When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.

 https://cve.radiocsirt.org/vuln/ghsa-q5r4-cfpx-h6fh GHSA-q5r4-cfpx-h6fh — Improper Handling of Length Parameter Inconsistency in Apache Ant 2026-10-04T05:02:52.592621+00:00

Affected: Maven: org.apache.ant:ant

When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.

 https://cve.radiocsirt.org/vuln/gsd-2021-36373 gsd-2021-36373 2026-10-04T05:02:52.592642+00:00 gsd-2021-36373 https://cve.radiocsirt.org/vuln/msrc_cve-2021-36373 msrc_CVE-2021-36373 — Apache Ant TAR archive denial of service vulnerability 2026-10-04T05:02:52.592654+00:00 msrc_CVE-2021-36373 https://cve.radiocsirt.org/vuln/oesa-2021-1277 OESA-2021-1277 — ant security update 2026-10-04T05:02:52.592670+00:00

Affected: openEuler:20.03-LTS-SP1: ant, openEuler:20.03-LTS-SP2: ant

Ant is a Java based build tool. In theory it is kind of like "make" without makes wrinkles and with the full portability of pure java code. Security Fix(es): When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.(CVE-2021-36373) When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives are for instance JAR files and many office files. Apache Ant prior to 1.9.16 and 1.10.11 were affected.(CVE-2021-36374)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11688-1 openSUSE-SU-2024:11688-1 — ant-1.10.12-1.1 on GA media 2026-10-04T05:02:52.592698+00:00

ant-1.10.12-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2022:5903 RHSA-2022:5903 — Red Hat Security Advisory: Red Hat Process Automation Manager 7.13.0 security update 2026-10-04T05:02:52.592717+00:00

mysql-connector-java: unauthorized access to critical wildfly-elytron: possible timing attack in ScramServer wildfly-core: Invalid Sensitivity Classification of Vault Expression wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users protobuf-java: potential DoS in the parsing procedure for binary data ant: excessive memory allocation when reading a specially crafted TAR archive netty-codec: Bzip2Decoder doesn't allow setting size restrictions for decompressed data netty-codec: SnappyFrameDecoder doesn't restrict chunk length and may buffer skippable chunks in an unnecessary way jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck netty: control chars in header names may lead to HTTP request smuggling spring-expression: Denial of service via specially crafted SpEL expression com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson

 https://cve.radiocsirt.org/vuln/suse-su-2022:1417-1 SUSE-SU-2022:1417-1 — Security update for ant 2026-10-04T05:02:52.592756+00:00

Security update for ant

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-36373 UBUNTU-CVE-2021-36373 2026-10-04T05:02:52.592771+00:00

Affected: Ubuntu:Pro:14.04:LTS: ant, Ubuntu:Pro:16.04:LTS: ant, Ubuntu:Pro:18.04:LTS: ant, Ubuntu:Pro:20.04:LTS: ant, Ubuntu:22.04:LTS: ant, Ubuntu:24.04:LTS: ant, Ubuntu:25.10: ant, Ubuntu:26.04:LTS: ant

When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Apache Ant prior to 1.9.16 and 1.10.11 were affected.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1738 WID-SEC-W-2022-1738 — IBM InfoSphere Information Server: Mehrere Schwachstellen 2026-10-04T05:02:52.592801+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM InfoSphere Information Server ausnutzen, um seine Privilegien zu erweitern, beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.