https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T19:27:20.042769+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2024-33598 cnvd-2024-33598 2026-10-08T19:27:20.046060+00:00 cnvd-2024-33598 https://cve.radiocsirt.org/vuln/euvd-2026-163156 EUVD-2026-163156 2026-10-08T19:27:20.046091+00:00 EUVD-2026-163156 https://cve.radiocsirt.org/vuln/fkie_cve-2024-29868 fkie_cve-2024-29868 2026-10-08T19:27:20.046105+00:00

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) vulnerability in Apache StreamPipes user self-registration and password recovery mechanism. This allows an attacker to guess the recovery token in a reasonable time and thereby to take over the attacked user's account. This issue affects Apache StreamPipes: from 0.69.0 through 0.93.0.

Users are recommended to upgrade to version 0.95.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-cf3q-vg8w-mw84 GHSA-cf3q-vg8w-mw84 — Apache StreamPipes: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Recovery Token Generation 2026-10-08T19:27:20.046138+00:00

Affected: Maven: org.apache.streampipes:streampipes-resource-management

Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) vulnerability in Apache StreamPipes user self-registration and password recovery mechanism. This allows an attacker to guess the recovery token in a reasonable time and thereby to take over the attacked user's account. This issue affects Apache StreamPipes: from 0.69.0 through 0.93.0.

Users are recommended to upgrade to version 0.95.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/gsd-2024-29868 gsd-2024-29868 2026-10-08T19:27:20.046164+00:00 gsd-2024-29868