https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:32:26.584394+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-08623 bdu:2024-08623 2026-10-02T15:32:26.737821+00:00 bdu:2024-08623 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0689 certfr-2024-avi-0689 — De multiples vulnérabilités ont été découvertes dans Spring Framework. Elles permettent à un attaquant de provoquer un… 2026-10-02T15:32:26.737860+00:00 certfr-2024-avi-0689 https://cve.radiocsirt.org/vuln/cleanstart-2026-if26545 Withdrawn: CLEANSTART-2026-IF26545 — Security fixes in apache-hive 4.0.1-r1 2026-10-02T15:32:26.737878+00:00

Withdrawn by the publisher.

Affected: CleanStart: apache-hive

Package apache-hive version 4.0.1-r1 fixes 27 vulnerabilities: CVE-2024-47561, CVE-2024-7254, CVE-2024-47554, CVE-2022-41881, CVE-2023-34462...

 https://cve.radiocsirt.org/vuln/euvd-2026-198628 EUVD-2026-198628 2026-10-02T15:32:26.737907+00:00 EUVD-2026-198628 https://cve.radiocsirt.org/vuln/fkie_cve-2024-38808 fkie_cve-2024-38808 2026-10-02T15:32:26.737918+00:00

In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) condition.

Specifically, an application is vulnerable when the following is true:

* The application evaluates user-supplied SpEL expressions.

 https://cve.radiocsirt.org/vuln/ghsa-9cmq-m9j5-mvww GHSA-9cmq-m9j5-mvww — Spring Framework vulnerable to Denial of Service 2026-10-02T15:32:26.737942+00:00

Affected: Maven: org.springframework:spring-expression

In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) condition. Older, unsupported versions are also affected.

Specifically, an application is vulnerable when the following is true:

* The application evaluates user-supplied SpEL expressions.

 https://cve.radiocsirt.org/vuln/rhsa-2024:6508 RHSA-2024:6508 — Red Hat Security Advisory: Red Hat Build of Apache Camel 4.4.2 for Spring Boot security update. 2026-10-02T15:32:26.737964+00:00

undertow: response write hangs in case of Java 17 TLSv1.3 NewSessionTicket undertow: Improper State Management in Proxy Protocol parsing causes information leakage spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-38808 UBUNTU-CVE-2024-38808 2026-10-02T15:32:26.737984+00:00

Affected: Ubuntu:Pro:14.04:LTS: libspring-java, Ubuntu:Pro:16.04:LTS: libspring-java, Ubuntu:Pro:18.04:LTS: libspring-java, Ubuntu:Pro:20.04:LTS: libspring-java, Ubuntu:Pro:22.04:LTS: libspring-java, Ubuntu:Pro:24.04:LTS: libspring-java, Ubuntu:25.10: libspring-java, Ubuntu:26.04:LTS: libspring-java

In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) condition. Specifically, an application is vulnerable when the following is true: * The application evaluates user-supplied SpEL expressions.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1853 WID-SEC-W-2024-1853 — VMware Tanzu Spring Framework: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-02T15:32:26.738012+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Framework ausnutzen, um einen Denial of Service Angriff durchzuführen.