https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:18:04.467313+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-10527 EUVD-2026-10527 2026-10-03T23:18:04.545710+00:00 EUVD-2026-10527 https://cve.radiocsirt.org/vuln/fkie_cve-2023-51079 fkie_cve-2023-51079 2026-10-03T23:18:04.545759+00:00

A long execution time can occur in the ParseTools.subCompileExpression method in MVEL 2.5.0.Final because of many Java class lookups. NOTE: the vendor disputes this because "the only thing that you could expect is that the parser will take a crazy amount of time to complete its task."

 https://cve.radiocsirt.org/vuln/ghsa-h63j-xqx6-w58r GHSA-h63j-xqx6-w58r — mvel2 TimeOut error exists in the ParseTools.subCompileExpression method 2026-10-03T23:18:04.545800+00:00

Affected: Maven: org.mvel:mvel2

A TimeOut error exists in the ParseTools.subCompileExpression method in mvel2 v2.5.0 Final.

 https://cve.radiocsirt.org/vuln/gsd-2023-51079 gsd-2023-51079 2026-10-03T23:18:04.545826+00:00 gsd-2023-51079 https://cve.radiocsirt.org/vuln/rhsa-2024:4884 RHSA-2024:4884 — Red Hat Security Advisory: Red Hat Build of Apache Camel 4.4.1 for Spring Boot security update. 2026-10-03T23:18:04.545839+00:00

mvel: TimeOut error when calling ParseTools.subCompileExpression() function io.vertx/vertx-core: memory leak due to the use of Netty FastThreadLocal data structures in Vertx io.vertx:vertx-core: memory leak when a TCP server is configured with TLS and SNI support pgjdbc: PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE undertow: Out-of-memory Error after several closed connections with wildfly-http-client protocol undertow: response write hangs in case of Java 17 TLSv1.3 NewSessionTicket undertow: url-encoded request path information can be broken on ajp-listener jetty: stop accepting new connections from valid clients spring-security: Broken Access Control in Spring Security With Direct Use of isFullyAuthenticated spring-security: Broken Access Control With Direct Use of AuthenticatedVoter threetenbp: null pointer exception netty-codec-http: Allocation of Resources Without Limits or Throttling org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service bc-java: BouncyCastle vulnerable to a timing variant of Bleichenbacher (Marvin Attack) org.bouncycastle:bcprov-jdk18on: Infinite loop in ED25519 verification in the ScalarUtil class org.bouncycastle: Use of Incorrectly-Resolved Name or Reference