https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:22:21.075316+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-05035 bdu:2023-05035 2026-10-03T02:22:21.081614+00:00 bdu:2023-05035 https://cve.radiocsirt.org/vuln/euvd-2026-193662 EUVD-2026-193662 2026-10-03T02:22:21.081647+00:00 EUVD-2026-193662 https://cve.radiocsirt.org/vuln/fkie_cve-2023-33008 fkie_cve-2023-33008 2026-10-03T02:22:21.081661+00:00

Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache Johnzon.

A malicious attacker can craft up some JSON input that uses large numbers (numbers such as 1e20000000) that Apache Johnzon will deserialize into BigDecimal and maybe use numbers too large which may result in a slow conversion (Denial of service risk). Apache Johnzon 1.2.21 mitigates this by setting a scale limit of 1000 (by default) to the BigDecimal.

This issue affects Apache Johnzon: through 1.2.20.

 https://cve.radiocsirt.org/vuln/ghsa-crqg-jrpj-fc84 GHSA-crqg-jrpj-fc84 — Apache Johnzon Deserialization of Untrusted Data vulnerability 2026-10-03T02:22:21.081694+00:00

Affected: Maven: org.apache.johnzon:johnzon-mapper

A malicious attacker can craft up some JSON input that uses large numbers (numbers such as 1e20000000) that Apache Johnzon will deserialize into BigDecimal and maybe use numbers too large which may result in a slow conversion (Denial of service risk). Apache Johnzon 1.2.21 mitigates this by setting a scale limit of 1000 (by default) to the BigDecimal.

This issue affects Apache Johnzon through 1.2.20.

 https://cve.radiocsirt.org/vuln/gsd-2023-33008 gsd-2023-33008 2026-10-03T02:22:21.081719+00:00 gsd-2023-33008 https://cve.radiocsirt.org/vuln/rhsa-2023:5441 RHSA-2023:5441 — Red Hat Security Advisory: Red Hat Integration Camel for Spring Boot 4.0.0 release and security update 2026-10-03T02:22:21.081730+00:00

batik: Server-Side Request Forgery vulnerability batik: Server-Side Request Forgery vulnerability apache-ivy: XML External Entity vulnerability jetty-server: OutOfMemoryError for large multipart without filename read via request.getParameter() jetty-server: Cookie parsing of quoted values can exfiltrate values from other cookies apache-johnzon: Prevent inefficient internal conversion from BigDecimal at large scale netty: SniHandler 16MB allocation leads to OOM jetty: Improper validation of HTTP/1 content-length

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2583 WID-SEC-W-2023-2583 — Red Hat JBoss A-MQ: Mehrere Schwachstellen 2026-10-03T02:22:21.081754+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat JBoss A-MQ ausnutzen, um Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuführen.