https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:54:49.110461+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-01020 bdu:2026-01020 2026-10-03T09:54:49.550981+00:00 bdu:2026-01020 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0224 certfr-2026-avi-0224 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T09:54:49.551049+00:00 certfr-2026-avi-0224 https://cve.radiocsirt.org/vuln/cleanstart-2026-at07752 CLEANSTART-2026-AT07752 — Security fix for CVE-2024-29371 applied in: apache-nifi 2.6.0-r3, apache-nifi 2.7.2-r7, confluent-common-docker 7.6.9-r… 2026-10-03T09:54:49.551087+00:00

Affected: CleanStart: apache-nifi, CleanStart: confluent-common-docker, CleanStart: strimzi-kafka-operator

CVE-2024-29371 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-266472 EUVD-2026-266472 2026-10-03T09:54:49.551143+00:00 EUVD-2026-266472 https://cve.radiocsirt.org/vuln/fkie_cve-2024-29371 fkie_cve-2024-29371 2026-10-03T09:54:49.551166+00:00

In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ratio. When this token is processed by the server, it results in significant memory allocation and processing time during decompression.

 https://cve.radiocsirt.org/vuln/ghsa-3677-xxcr-wjqv GHSA-3677-xxcr-wjqv — jose4j is vulnerable to DoS via compressed JWE content 2026-10-03T09:54:49.551202+00:00

Affected: Maven: org.bitbucket.b_c:jose4j

In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ratio. When this token is processed by the server, it results in significant memory allocation and processing time during decompression.

 https://cve.radiocsirt.org/vuln/gsd-2024-29371 gsd-2024-29371 2026-10-03T09:54:49.551254+00:00 gsd-2024-29371 https://cve.radiocsirt.org/vuln/rhsa-2024:5479 RHSA-2024:5479 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.3 Security update 2026-10-03T09:54:49.551285+00:00

cxf-core: Apache CXF SSRF Vulnerability using the Aegis databinding netty-codec-http: Allocation of Resources Without Limits or Throttling jose4j: jose4j: Denial of Service via malicious JSON Web Encryption (JWE) token compression org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service bc-java: BouncyCastle vulnerable to a timing variant of Bleichenbacher (Marvin Attack) org.bouncycastle:bcprov-jdk18on: Infinite loop in ED25519 verification in the ScalarUtil class

 https://cve.radiocsirt.org/vuln/suse-su-2026:1010-1 SUSE-SU-2026:1010-1 — Security update 5.0.7 for Multi-Linux Manager Server 2026-10-03T09:54:49.551341+00:00

Security update 5.0.7 for Multi-Linux Manager Server

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-29371 UBUNTU-CVE-2024-29371 2026-10-03T09:54:49.551377+00:00

Affected: Ubuntu:22.04:LTS: libjose4j-java, Ubuntu:24.04:LTS: libjose4j-java, Ubuntu:25.10: libjose4j-java, Ubuntu:26.04:LTS: libjose4j-java

In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ratio. When this token is processed by the server, it results in significant memory allocation and processing time during decompression.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0517 WID-SEC-W-2026-0517 — IBM WebSphere Application Server und WebSphere Application Server Liberty: Schwachstelle ermöglicht Denial of Service 2026-10-03T09:54:49.551424+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM WebSphere Application Server und WebSphere Application Server Liberty ausnutzen, um einen Denial of Service Angriff durchzuführen.