https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T20:31:12.961289+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-231634 EUVD-2026-231634 2026-10-12T20:31:12.964725+00:00 EUVD-2026-231634 https://cve.radiocsirt.org/vuln/fkie_cve-2022-32531 fkie_cve-2022-32531 2026-10-12T20:31:12.964753+00:00

The Apache Bookkeeper Java Client (before 4.14.6 and also 4.15.0) does not close the connection to the bookkeeper server when TLS hostname verification fails. This leaves the bookkeeper client vulnerable to a man in the middle attack.

The problem affects BookKeeper client prior to versions 4.14.6 and 4.15.1.

 https://cve.radiocsirt.org/vuln/ghsa-gxq5-79m2-gvvq GHSA-gxq5-79m2-gvvq — Apache Bookkeeper vulnerable to Improper Certificate Validation 2026-10-12T20:31:12.964783+00:00

Affected: Maven: org.apache.bookkeeper:bookkeeper-common

The Apache Bookkeeper Java Client (before 4.14.6 and also 4.15.0) does not close the connection to the bookkeeper server when TLS hostname verification fails. This leaves the bookkeeper client vulnerable to a man in the middle attack. The problem affects BookKeeper client prior to versions 4.14.6 and 4.15.1.

 https://cve.radiocsirt.org/vuln/gsd-2022-32531 gsd-2022-32531 2026-10-12T20:31:12.964808+00:00 gsd-2022-32531 https://cve.radiocsirt.org/vuln/pysec-2022-43060 PYSEC-2022-43060 2026-10-12T20:31:12.964820+00:00

Affected: PyPI: apache-bookkeeper-client

The Apache Bookkeeper Java Client (before 4.14.6 and also 4.15.0) does not close the connection to the bookkeeper server when TLS hostname verification fails. This leaves the bookkeeper client vulnerable to a man in the middle attack.

The problem affects BookKeeper client prior to versions 4.14.6 and 4.15.1.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-32531 UBUNTU-CVE-2022-32531 2026-10-12T20:31:12.964839+00:00

Affected: Ubuntu:16.04:LTS: bookkeeper, Ubuntu:18.04:LTS: bookkeeper, Ubuntu:20.04:LTS: bookkeeper, Ubuntu:22.04:LTS: bookkeeper

The Apache Bookkeeper Java Client (before 4.14.6 and also 4.15.0) does not close the connection to the bookkeeper server when TLS hostname verification fails. This leaves the bookkeeper client vulnerable to a man in the middle attack. The problem affects BookKeeper client prior to versions 4.14.6 and 4.15.1.