https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:18:14.279484+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2024-avi-0715 certfr-2024-avi-0715 — Une vulnérabilité a été découverte dans Spring Boot. Elle permet à un attaquant de provoquer un contournement de la pol… 2026-10-03T16:18:14.360870+00:00 certfr-2024-avi-0715 https://cve.radiocsirt.org/vuln/euvd-2026-225735 EUVD-2026-225735 2026-10-03T16:18:14.360912+00:00 EUVD-2026-225735 https://cve.radiocsirt.org/vuln/fkie_cve-2024-38807 fkie_cve-2024-38807 2026-10-03T16:18:14.360927+00:00

Applications that use spring-boot-loader or spring-boot-loader-classic and contain custom code that performs signature verification of nested jar files may be vulnerable to signature forgery where content that appears to have been signed by one signer has, in fact, been signed by another.

 https://cve.radiocsirt.org/vuln/ghsa-7cj3-x93g-gj76 GHSA-7cj3-x93g-gj76 — Signature forgery in Spring Boot's Loader 2026-10-03T16:18:14.360955+00:00

Affected: Maven: org.springframework.boot:spring-boot-loader, Maven: org.springframework.boot:spring-boot-loader-classic

Applications that use spring-boot-loader or spring-boot-loader-classic and contain custom code that performs signature verification of nested jar files may be vulnerable to signature forgery where content that appears to have been signed by one signer has, in fact, been signed by another.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-38807 UBUNTU-CVE-2024-38807 2026-10-03T16:18:14.360985+00:00

Affected: Ubuntu:Pro:14.04:LTS: libspring-java, Ubuntu:Pro:16.04:LTS: libspring-java, Ubuntu:Pro:18.04:LTS: libspring-java, Ubuntu:Pro:20.04:LTS: libspring-java, Ubuntu:Pro:22.04:LTS: libspring-java, Ubuntu:Pro:24.04:LTS: libspring-java, Ubuntu:25.10: libspring-java, Ubuntu:26.04:LTS: libspring-java

Applications that use spring-boot-loader or spring-boot-loader-classic and contain custom code that performs signature verification of nested jar files may be vulnerable to signature forgery where content that appears to have been signed by one signer has, in fact, been signed by another.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1916 WID-SEC-W-2024-1916 — VMware Tanzu Spring Boot: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen 2026-10-03T16:18:14.361013+00:00

Ein lokaler Angreifer kann eine Schwachstelle in VMware Tanzu Spring Boot ausnutzen, um Sicherheitsvorkehrungen zu umgehen.