https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:00:04.876451+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-344 certfr-2022-avi-344 — Une vulnérabilité a été découverte dans VMware Spring. Elle permet à un attaquant de provoquer un contournement de la p… 2026-10-03T00:00:04.989665+00:00 certfr-2022-avi-344 https://cve.radiocsirt.org/vuln/euvd-2026-13656 EUVD-2026-13656 2026-10-03T00:00:04.989711+00:00 EUVD-2026-13656 https://cve.radiocsirt.org/vuln/fkie_cve-2022-22968 fkie_cve-2022-22968 2026-10-03T00:00:04.989726+00:00

In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a field is not effectively protected unless it is listed with both upper and lower case for the first character of the field, including upper and lower case for the first character of all nested fields within the property path.

 https://cve.radiocsirt.org/vuln/ghsa-g5mm-vmx4-3rg7 GHSA-g5mm-vmx4-3rg7 — Improper handling of case sensitivity in Spring Framework 2026-10-03T00:00:04.989756+00:00

Affected: Maven: org.springframework:spring-context

In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a field is not effectively protected unless it is listed with both upper and lower case for the first character of the field, including upper and lower case for the first character of all nested fields within the property path. Versions 5.3.19 and 5.2.21 contain a patch for this issue.

 https://cve.radiocsirt.org/vuln/gsd-2022-22968 gsd-2022-22968 2026-10-03T00:00:04.989783+00:00 gsd-2022-22968 https://cve.radiocsirt.org/vuln/rhsa-2022:5101 RHSA-2022:5101 — Red Hat Security Advisory: Red Hat AMQ Broker 7.10.0 release and security update 2026-10-03T00:00:04.989795+00:00

nodejs-lodash: prototype pollution in defaultsDeep function leading to modifying properties jackson-databind: denial of service via a large depth of nested objects Broker: Malformed message can result in partial DoS (OOM) netty: control chars in header names may lead to HTTP request smuggling amq: AMQ Broker Operator ClusterWide Edit Permissions Due Token Exposure Framework: Data Binding Rules Vulnerability artemis-commons: Apache ActiveMQ Artemis DoS

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-22968 UBUNTU-CVE-2022-22968 2026-10-03T00:00:04.989836+00:00

Affected: Ubuntu:Pro:14.04:LTS: libspring-java, Ubuntu:Pro:16.04:LTS: libspring-java, Ubuntu:Pro:18.04:LTS: libspring-java, Ubuntu:Pro:20.04:LTS: libspring-java, Ubuntu:Pro:22.04:LTS: libspring-java, Ubuntu:Pro:24.04:LTS: libspring-java, Ubuntu:25.10: libspring-java, Ubuntu:26.04:LTS: libspring-java

In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a field is not effectively protected unless it is listed with both upper and lower case for the first character of the field, including upper and lower case for the first character of all nested fields within the property path.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0068 WID-SEC-W-2022-0068 — VMware Tanzu Spring Framework: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-03T00:00:04.989889+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in VMware Tanzu Spring Framework ausnutzen, um Sicherheitsvorkehrungen zu umgehen.