https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T22:29:19.553560+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2022-avi-834 certfr-2022-avi-834 — Une vulnérabilité a été découverte dans VMware Spring. Elle permet à un attaquant de provoquer une atteinte à la confid… 2026-10-05T22:29:19.556725+00:00 certfr-2022-avi-834 https://cve.radiocsirt.org/vuln/euvd-2026-241030 EUVD-2026-241030 2026-10-05T22:29:19.556759+00:00 EUVD-2026-241030 https://cve.radiocsirt.org/vuln/fkie_cve-2022-31679 fkie_cve-2022-31679 2026-10-05T22:29:19.556774+00:00

Applications that allow HTTP PATCH access to resources exposed by Spring Data REST in versions 3.6.0 - 3.5.5, 3.7.0 - 3.7.2, and older unsupported versions, if an attacker knows about the structure of the underlying domain model, they can craft HTTP requests that expose hidden entity attributes.

 https://cve.radiocsirt.org/vuln/ghsa-fv7x-v67w-cvqv GHSA-fv7x-v67w-cvqv — Spring Data REST can expose hidden entity attributes 2026-10-05T22:29:19.556800+00:00

Affected: Maven: org.springframework.data:spring-data-rest-core

Applications that allow HTTP PATCH access to resources exposed by Spring Data REST in versions 3.6.0 - 3.6.6, 3.7.0 - 3.7.2, and older unsupported versions, if an attacker knows about the structure of the underlying domain model, they can craft HTTP requests that expose hidden entity attributes.

 https://cve.radiocsirt.org/vuln/gsd-2022-31679 gsd-2022-31679 2026-10-05T22:29:19.556823+00:00 gsd-2022-31679