https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:57:05.419396+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0276 certfr-2023-avi-0276 — De multiples vulnérabilités ont été découvertes dans <span class="textit">IBM</span>. Elles permettent à un attaquant d… 2026-10-03T10:57:05.508290+00:00 certfr-2023-avi-0276 https://cve.radiocsirt.org/vuln/fkie_cve-2022-40154 fkie_cve-2022-40154 2026-10-03T10:57:05.508333+00:00

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage.

 https://cve.radiocsirt.org/vuln/ghsa-9fwf-46g9-45rx Withdrawn: GHSA-9fwf-46g9-45rx — Denial of Service via stack overflow 2026-10-03T10:57:05.508364+00:00

Withdrawn by the publisher.

Affected: Maven: com.fasterxml.woodstox:woodstox-core

## Withdrawn

This advisory has been withdrawn because it has been found to be a duplicate. Please see the issue [here](https://github.com/x-stream/xstream/issues/304#issuecomment-1293654236) for more information.

## Original Despcription

Those using FasterXML/woodstox to serialise XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack overflow. This effect may support a denial of service attack.

This vulnerability is only relevant for users making use of the DTD parsing functionality.

 https://cve.radiocsirt.org/vuln/gsd-2022-40154 gsd-2022-40154 2026-10-03T10:57:05.508395+00:00 gsd-2022-40154 https://cve.radiocsirt.org/vuln/rhsa-2023:0469 RHSA-2023:0469 — Red Hat Security Advisory: Red Hat Integration Camel Extensions For Quarkus 2.13.2 2026-10-03T10:57:05.508408+00:00

jettison: parser crash by stackoverflow jettison: memory exhaustion via user-supplied XML or JSON data xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS jackson-databind: use of deeply nested arrays apache-commons-text: variable interpolation RCE

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-40154 Withdrawn: UBUNTU-CVE-2022-40154 2026-10-03T10:57:05.508442+00:00

Withdrawn by the publisher.

Affected: Ubuntu:Pro:16.04:LTS: libxstream-java

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent accidental usage.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0209 WID-SEC-W-2023-0209 — Red Hat Integration Camel Extensions for Quarkus: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-03T10:57:05.508461+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Integration Camel Extensions for Quarkus ausnutzen, um einen Denial of Service Angriff durchzuführen.