https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T15:04:28.634926+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-02310 bdu:2024-02310 2026-10-04T15:04:29.029438+00:00 bdu:2024-02310 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0180 certfr-2024-avi-0180 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits IBM</span>. Certaines d'entre el… 2026-10-04T15:04:29.029496+00:00 certfr-2024-avi-0180 https://cve.radiocsirt.org/vuln/cleanstart-2026-mm56295 Withdrawn: CLEANSTART-2026-MM56295 — Security fixes in spark-sc212-jdk17-py311 3.4.4-r0 2026-10-04T15:04:29.029517+00:00

Withdrawn by the publisher.

Affected: CleanStart: spark-sc212-jdk17-py311

Package spark-sc212-jdk17-py311 version 3.4.4-r0 fixes 45 vulnerabilities: ghsa-mjmj-j48q-9wg2, CVE-2022-1471, ghsa-r7pg-v2c8-mfg3, CVE-2024-47561, CVE-2023-39410...

 https://cve.radiocsirt.org/vuln/euvd-2026-216707 EUVD-2026-216707 2026-10-04T15:04:29.029549+00:00 EUVD-2026-216707 https://cve.radiocsirt.org/vuln/fkie_cve-2023-39410 fkie_cve-2023-39410 2026-10-04T15:04:29.029562+00:00

When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system.

This issue affects Java applications using Apache Avro Java SDK up to and including 1.11.2. Users should update to apache-avro version 1.11.3 which addresses this issue.

 https://cve.radiocsirt.org/vuln/ghsa-rhrv-645h-fjfh GHSA-rhrv-645h-fjfh — Apache Avro Java SDK vulnerable to Improper Input Validation 2026-10-04T15:04:29.029586+00:00

Affected: Maven: org.apache.avro:avro

When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system.

This issue affects Java applications using Apache Avro Java SDK up to and including 1.11.2. Users should update to apache-avro version 1.11.3 which addresses this issue.

 https://cve.radiocsirt.org/vuln/gsd-2023-39410 gsd-2023-39410 2026-10-04T15:04:29.029608+00:00 gsd-2023-39410 https://cve.radiocsirt.org/vuln/oesa-2024-1809 OESA-2024-1809 — avro security update 2026-10-04T15:04:29.029619+00:00

Affected: openEuler:22.03-LTS-SP1: avro

Apache Avro is a data serialization system. Security Fix(es): When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affects Java applications using Apache Avro Java SDK up to and including 1.11.2. Users should update to apache-avro version 1.11.3 which addresses this issue. (CVE-2023-39410)

 https://cve.radiocsirt.org/vuln/pysec-2023-188 PYSEC-2023-188 2026-10-04T15:04:29.029640+00:00

Affected: PyPI: avro

When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system.

This issue affects Java applications using Apache Avro Java SDK up to and including 1.11.2. Users should update to apache-avro version 1.11.3 which addresses this issue.

 https://cve.radiocsirt.org/vuln/rhsa-2023:7247 RHSA-2023:7247 — Red Hat Security Advisory: Red Hat Fuse 7.12.1 release and security update 2026-10-04T15:04:29.029659+00:00

undertow: OutOfMemoryError due to @MultipartConfig handling okio: GzipSource class improper exception handling spring-security-webflux: path wildcard leads to security bypass jetty: hpack header values cause denial of service in http/2 jetty: Improper addition of quotation marks to user inputs in CgiServlet apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK jetty: Improper validation of HTTP/1 content-length jetty: OpenId Revoked authentication allows one request tomcat: FileUpload: DoS due to accumulation of temporary files on Windows tomcat: improper cleaning of recycled objects could lead to information leak HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) tomcat: incorrectly parsed http trailer headers can cause request smuggling activemq-openwire: OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3025 WID-SEC-W-2023-3025 — IBM InfoSphere Information Server: Mehrere Schwachstellen 2026-10-04T15:04:29.029698+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in IBM InfoSphere Information Server ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, Cross-Site-Scripting-Angriffe durchzuführen oder einen Denial of Service Zustand herbeizuführen.