https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:01:29.363119+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0398 certfr-2023-avi-0398 — De multiples vulnérabilités ont été découvertes dans les produits VMware Spring. Elles permettent à un attaquant de pro… 2026-10-02T14:01:29.374971+00:00 certfr-2023-avi-0398 https://cve.radiocsirt.org/vuln/euvd-2026-237275 EUVD-2026-237275 2026-10-02T14:01:29.375010+00:00 EUVD-2026-237275 https://cve.radiocsirt.org/vuln/fkie_cve-2023-20873 fkie_cve-2023-20873 2026-10-02T14:01:29.375025+00:00

In Spring Boot versions 3.0.0 - 3.0.5, 2.7.0 - 2.7.10, and older unsupported versions, an application that is deployed to Cloud Foundry could be susceptible to a security bypass. Users of affected versions should apply the following mitigation: 3.0.x users should upgrade to 3.0.6+. 2.7.x users should upgrade to 2.7.11+. Users of older, unsupported versions should upgrade to 3.0.6+ or 2.7.11+.

 https://cve.radiocsirt.org/vuln/ghsa-g5h3-w546-pj7f GHSA-g5h3-w546-pj7f — Spring Boot Security Bypass with Wildcard Pattern Matching on Cloud Foundry 2026-10-02T14:01:29.375053+00:00

Affected: Maven: org.springframework.boot:spring-boot-actuator-autoconfigure

In Spring Boot versions 3.0.0 - 3.0.5, 2.7.0 - 2.7.10, and older unsupported versions, an application that is deployed to Cloud Foundry could be susceptible to a security bypass. Users of affected versions should apply the following mitigation: 3.0.x users should upgrade to 3.0.6+. 2.7.x users should upgrade to 2.7.11+. Users of older, unsupported versions should upgrade to 3.0.6+ or 2.7.11+.

 https://cve.radiocsirt.org/vuln/gsd-2023-20873 gsd-2023-20873 2026-10-02T14:01:29.375080+00:00 gsd-2023-20873 https://cve.radiocsirt.org/vuln/rhsa-2023:5147 RHSA-2023:5147 — Red Hat Security Advisory: Red Hat Integration Camel for Spring Boot 3.18.3.2 release and security update 2026-10-02T14:01:29.375092+00:00

jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode spring-boot: Security Bypass With Wildcard Pattern Matching on Cloud Foundry bouncycastle: potential blind LDAP injection attack using a self-signed certificate snappy-java: Unchecked chunk length leads to DoS

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1057 WID-SEC-W-2023-1057 — VMware Tanzu Spring Boot: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-02T14:01:29.375112+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in VMware Tanzu Spring Boot ausnutzen, um Sicherheitsvorkehrungen zu umgehen.