https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:03:53.158297+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-08100 bdu:2023-08100 2026-10-03T12:03:53.780278+00:00 bdu:2023-08100 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0513 certfr-2023-avi-0513 — De multiples vulnérabilités ont été découvertes dans les produits <span class="textit">IBM</span>. Elles permettent à u… 2026-10-03T12:03:53.780327+00:00 certfr-2023-avi-0513 https://cve.radiocsirt.org/vuln/euvd-2026-219134 EUVD-2026-219134 2026-10-03T12:03:53.780348+00:00 EUVD-2026-219134 https://cve.radiocsirt.org/vuln/fkie_cve-2023-1436 fkie_cve-2023-1436 2026-10-03T12:03:53.780361+00:00

An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown.

 https://cve.radiocsirt.org/vuln/ghsa-q6g2-g7f3-rr83 GHSA-q6g2-g7f3-rr83 — Jettison vulnerable to infinite recursion 2026-10-03T12:03:53.780391+00:00

Affected: Maven: org.codehaus.jettison:jettison

An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown.

 https://cve.radiocsirt.org/vuln/gsd-2023-1436 gsd-2023-1436 2026-10-03T12:03:53.780415+00:00 gsd-2023-1436 https://cve.radiocsirt.org/vuln/oesa-2023-1963 OESA-2023-1963 — jettison security update 2026-10-03T12:03:53.780426+00:00

Affected: openEuler:20.03-LTS-SP1: jettison

Jettison is a collection of Java APIs (like STaX and DOM) which read and write JSON. This allows nearly transparent enablement of JSON based web services in services frameworks like CXF or XML serialization frameworks like XStream. Security Fix(es): An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown. (CVE-2023-1436)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12871-1 openSUSE-SU-2024:12871-1 — jettison-1.5.4-1.1 on GA media 2026-10-03T12:03:53.780447+00:00

jettison-1.5.4-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:2100 RHSA-2023:2100 — Red Hat Security Advisory: Red Hat Integration Camel for Spring Boot 3.20.1 security update 2026-10-03T12:03:53.780465+00:00

apache-commons-net: FTP client trusts the host from PASV response by default undertow: Server identity in https connection is not checked by the undertow client snakeyaml: Denial of Service due to missing nested depth limitation for collections apache-spark: XSS vulnerability in log viewer UI Javascript Pulsar: Improper Hostname Verification in Java Client and Proxy can expose authentication data via MITM apache-ivy: Directory Traversal Ivy: Ivy Path traversal batik: Server-Side Request Forgery batik: Server-Side Request Forgery snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode scandium: Failing DTLS handshakes may cause throttling to block processing of records batik: Server-Side Request Forgery (SSRF) vulnerability jettison: memory exhaustion via user-supplied XML or JSON data xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks batik: Apache XML Graphics Batik vulnerable to code execution via SVG JXPath: untrusted XPath expressions may lead to RCE attack hsqldb: Untrusted input may lead to RC…

 https://cve.radiocsirt.org/vuln/suse-su-2023:1948-1 SUSE-SU-2023:1948-1 — Security update for jettison 2026-10-03T12:03:53.780537+00:00

Security update for jettison

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-1436 UBUNTU-CVE-2023-1436 2026-10-03T12:03:53.780553+00:00

Affected: Ubuntu:Pro:16.04:LTS: libjettison-java, Ubuntu:Pro:18.04:LTS: libjettison-java, Ubuntu:Pro:20.04:LTS: libjettison-java, Ubuntu:Pro:22.04:LTS: libjettison-java, Ubuntu:24.04:LTS: libjettison-java, Ubuntu:25.10: libjettison-java, Ubuntu:26.04:LTS: libjettison-java

An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1142 WID-SEC-W-2023-1142 — Red Hat Integration Camel for Spring Boot: Mehrere Schwachstellen 2026-10-03T12:03:53.780582+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Integration Camel for Spring Boot ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität zu gefährden.