https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T21:26:44.519822+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-952 certfr-2022-avi-952 — De multiples vulnérabilités ont été découvertes dans IBM QRadar. Certaines d'entre elles permettent à un attaquant de p… 2026-10-04T21:26:44.671754+00:00 certfr-2022-avi-952 https://cve.radiocsirt.org/vuln/euvd-2026-16780 EUVD-2026-16780 2026-10-04T21:26:44.671806+00:00 EUVD-2026-16780 https://cve.radiocsirt.org/vuln/fkie_cve-2022-30973 fkie_cve-2022-30973 2026-10-04T21:26:44.671822+00:00

We failed to apply the fix for CVE-2022-30126 to the 1.x branch in the 1.28.2 release. In Apache Tika, a regular expression in the StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler. This is fixed in 1.28.3.

 https://cve.radiocsirt.org/vuln/ghsa-qw3f-w4pf-jh5f GHSA-qw3f-w4pf-jh5f — Regular expression denial of service in apache tika 2026-10-04T21:26:44.671854+00:00

Affected: Maven: org.apache.tika:tika-core

We failed to apply the fix for CVE-2022-30126 to the 1.x branch in the 1.28.2 release. In Apache Tika, a regular expression in the StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler. This is fixed in 1.28.3.

 https://cve.radiocsirt.org/vuln/gsd-2022-30973 gsd-2022-30973 2026-10-04T21:26:44.671880+00:00 gsd-2022-30973 https://cve.radiocsirt.org/vuln/rhsa-2022:7257 RHSA-2022:7257 — Red Hat Security Advisory: Red Hat Integration Camel-K 1.8.1 security update 2026-10-04T21:26:44.671893+00:00

jetty: requests to the ConcatServlet and WelcomeFilter are able to access protected resources within the WEB-INF directory tika-core: incomplete fix for CVE-2022-30126

 https://cve.radiocsirt.org/vuln/suse-su-2022:3310-1 SUSE-SU-2022:3310-1 — Security update for tika-core 2026-10-04T21:26:44.671915+00:00

Security update for tika-core

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-30973 UBUNTU-CVE-2022-30973 2026-10-04T21:26:44.671932+00:00

Affected: Ubuntu:16.04:LTS: tika, Ubuntu:18.04:LTS: tika, Ubuntu:Pro:20.04:LTS: tika, Ubuntu:Pro:22.04:LTS: tika, Ubuntu:24.04:LTS: tika, Ubuntu:25.10: tika, Ubuntu:26.04:LTS: tika

We failed to apply the fix for CVE-2022-30126 to the 1.x branch in the 1.28.2 release. In Apache Tika, a regular expression in the StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler. This is fixed in 1.28.3.