https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:11:08.548775+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-00088 bdu:2024-00088 2026-10-03T14:11:08.836164+00:00 bdu:2024-00088 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0281 certfr-2026-avi-0281 — De multiples vulnérabilités ont été découvertes dans les produits Splunk. Certaines d'entre elles permettent à un attaq… 2026-10-03T14:11:08.836223+00:00 certfr-2026-avi-0281 https://cve.radiocsirt.org/vuln/euvd-2026-219274 EUVD-2026-219274 2026-10-03T14:11:08.836253+00:00 EUVD-2026-219274 https://cve.radiocsirt.org/vuln/fkie_cve-2021-46877 fkie_cve-2021-46877 2026-10-03T14:11:08.836273+00:00

jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization.

 https://cve.radiocsirt.org/vuln/ghsa-3x8x-79m2-3w2w GHSA-3x8x-79m2-3w2w — jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode 2026-10-03T14:11:08.836317+00:00

Affected: Maven: com.fasterxml.jackson.core:jackson-databind

jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization.

 https://cve.radiocsirt.org/vuln/gsd-2021-46877 gsd-2021-46877 2026-10-03T14:11:08.836357+00:00 gsd-2021-46877 https://cve.radiocsirt.org/vuln/rhsa-2023:2097 RHSA-2023:2097 — Red Hat Security Advisory: Satellite 6.13 Release 2026-10-03T14:11:08.836376+00:00

jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode SnakeYaml: Constructor Deserialization Remote Code Execution rubygem-actionpack: Possible cross-site scripting vulnerability in Action Pack rubygem-loofah: inefficient regular expression leading to denial of service rubygem-loofah: Improper neutralization of data URIs leading to Cross Site Scripting rubygem-loofah: Uncontrolled Recursion leading to denial of service rubygem-rails-html-sanitizer: Inefficient Regular Expression leading to denial of service rubygem-rails-html-sanitizer: Improper neutralization of data URIs leading to Cross site scripting rubygem-rails-html-sanitizer: Cross site scripting vulnerability with certain configurations rubygem-rails-html-sanitizer: Cross site scripting vulnerability with certain configurations snakeyaml: Denial of Service due to missing nested depth limitation for collections tfm-rubygem-actionview: Possible cross-site scripting vulnerability in Action View tag helpers rubygem-tzinfo: arbitrary code execution activerecord: Possible RCE escalation bug with Serialized Columns in Active Record apache-commons-configuration: Apache Commons Configuration insecure interpolation defaults snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match snakeyaml: Uncaug…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-46877 UBUNTU-CVE-2021-46877 2026-10-03T14:11:08.836473+00:00

Affected: Ubuntu:20.04:LTS: jackson-databind, Ubuntu:22.04:LTS: jackson-databind

jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0685 WID-SEC-W-2023-0685 — FasterXML Jackson: Schwachstelle ermöglicht Denial of Service 2026-10-03T14:11:08.836511+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in FasterXML Jackson ausnutzen, um einen Denial of Service Angriff durchzuführen.