https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T07:19:56.983946+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-32143 EUVD-2026-32143 2026-10-03T07:19:57.067380+00:00 EUVD-2026-32143 https://cve.radiocsirt.org/vuln/fkie_cve-2021-42575 fkie_cve-2021-42575 2026-10-03T07:19:57.067417+00:00

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.

 https://cve.radiocsirt.org/vuln/ghsa-3w73-fmf3-hg5c GHSA-3w73-fmf3-hg5c — Policies not properly enforced in OWASP Java HTML Sanitizer 2026-10-03T07:19:57.067448+00:00

Affected: Maven: com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer

The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the `SELECT`, `STYLE`, and `OPTION` elements.

 https://cve.radiocsirt.org/vuln/gsd-2021-42575 gsd-2021-42575 2026-10-03T07:19:57.067472+00:00 gsd-2021-42575 https://cve.radiocsirt.org/vuln/rhsa-2022:7409 RHSA-2022:7409 — Red Hat Security Advisory: Red Hat Single Sign-On 7.6.1 security update on RHEL 7 2026-10-03T07:19:57.067484+00:00

jackson-databind: denial of service via a large depth of nested objects h2: Remote Code Execution in Console owasp-java-html-sanitizer: improper policies enforcement may lead to remote code execution netty: control chars in header names may lead to HTTP request smuggling xnio: org.xnio.StreamConnection.notifyReadClosed log to debug instead of stderr keycloak: Stored XSS in groups dropdown jboss-client: memory leakage in remote client transaction wildfly: Wildfly management of EJB Session context returns wrong caller principal with Elytron Security enabled undertow: Double AJP response for 400 from EAP 7 results in CPING failures keycloak: Uploading of SAML javascript protocol mapper scripts through the admin console artemis-commons: Apache ActiveMQ Artemis DoS

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1023 WID-SEC-W-2023-1023 — Oracle Commerce: Mehrere Schwachstellen 2026-10-03T07:19:57.067515+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Commerce ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.