https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:13:42.080342+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-02018 bdu:2023-02018 2026-10-03T20:13:42.266913+00:00 bdu:2023-02018 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0397 certfr-2023-avi-0397 — Une vulnérabilité a été découverte dans IBM Sterling Connect. Elle permet à un attaquant de provoquer un contournement… 2026-10-03T20:13:42.266962+00:00 certfr-2023-avi-0397 https://cve.radiocsirt.org/vuln/euvd-2026-218350 EUVD-2026-218350 2026-10-03T20:13:42.266991+00:00 EUVD-2026-218350 https://cve.radiocsirt.org/vuln/fkie_cve-2023-20860 fkie_cve-2023-20860 2026-10-03T20:13:42.267011+00:00

Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern in Spring Security configuration with the mvcRequestMatcher creates a mismatch in pattern matching between Spring Security and Spring MVC, and the potential for a security bypass.

 https://cve.radiocsirt.org/vuln/ghsa-7phw-cxx7-q9vq GHSA-7phw-cxx7-q9vq — Spring Framework is vulnerable to security bypass via mvcRequestMatcher pattern mismatch 2026-10-03T20:13:42.267062+00:00

Affected: Maven: org.springframework:spring, Maven: org.springframework:spring-webmvc

Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern in Spring Security configuration with the mvcRequestMatcher creates a mismatch in pattern matching between Spring Security and Spring MVC, and the potential for a security bypass.

 https://cve.radiocsirt.org/vuln/gsd-2023-20860 gsd-2023-20860 2026-10-03T20:13:42.267122+00:00 gsd-2023-20860 https://cve.radiocsirt.org/vuln/rhsa-2023:2100 RHSA-2023:2100 — Red Hat Security Advisory: Red Hat Integration Camel for Spring Boot 3.20.1 security update 2026-10-03T20:13:42.267143+00:00

apache-commons-net: FTP client trusts the host from PASV response by default undertow: Server identity in https connection is not checked by the undertow client snakeyaml: Denial of Service due to missing nested depth limitation for collections apache-spark: XSS vulnerability in log viewer UI Javascript Pulsar: Improper Hostname Verification in Java Client and Proxy can expose authentication data via MITM apache-ivy: Directory Traversal Ivy: Ivy Path traversal batik: Server-Side Request Forgery batik: Server-Side Request Forgery snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode scandium: Failing DTLS handshakes may cause throttling to block processing of records batik: Server-Side Request Forgery (SSRF) vulnerability jettison: memory exhaustion via user-supplied XML or JSON data xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks woodstox-core: woodstox to serialise XML data was vulnerable to Denial of Service attacks xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks batik: Apache XML Graphics Batik vulnerable to code execution via SVG JXPath: untrusted XPath expressions may lead to RCE attack hsqldb: Untrusted input may lead to RC…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-20860 UBUNTU-CVE-2023-20860 2026-10-03T20:13:42.267299+00:00

Affected: Ubuntu:Pro:14.04:LTS: libspring-java, Ubuntu:Pro:16.04:LTS: libspring-java, Ubuntu:Pro:18.04:LTS: libspring-java, Ubuntu:Pro:20.04:LTS: libspring-java, Ubuntu:Pro:22.04:LTS: libspring-java, Ubuntu:Pro:24.04:LTS: libspring-java, Ubuntu:25.10: libspring-java, Ubuntu:26.04:LTS: libspring-java

Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern in Spring Security configuration with the mvcRequestMatcher creates a mismatch in pattern matching between Spring Security and Spring MVC, and the potential for a security bypass.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0697 WID-SEC-W-2023-0697 — VMware Tanzu Spring Framework: Mehrere Schwachstellen 2026-10-03T20:13:42.267374+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Framework ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.