https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T09:34:41.864628+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-08650 bdu:2024-08650 2026-10-03T09:34:41.995548+00:00 bdu:2024-08650 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0689 certfr-2024-avi-0689 — De multiples vulnérabilités ont été découvertes dans Spring Framework. Elles permettent à un attaquant de provoquer un… 2026-10-03T09:34:41.995585+00:00 certfr-2024-avi-0689 https://cve.radiocsirt.org/vuln/euvd-2026-189869 EUVD-2026-189869 2026-10-03T09:34:41.995603+00:00 EUVD-2026-189869 https://cve.radiocsirt.org/vuln/fkie_cve-2024-38809 fkie_cve-2024-38809 2026-10-03T09:34:41.995615+00:00

Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack.

Users of affected versions should upgrade to the corresponding fixed version.

Users of older, unsupported versions could enforce a size limit on "If-Match" and "If-None-Match" headers, e.g. through a Filter.

 https://cve.radiocsirt.org/vuln/ghsa-2rmj-mq67-h97g GHSA-2rmj-mq67-h97g — Spring Framework DoS via conditional HTTP request 2026-10-03T09:34:41.995646+00:00

Affected: Maven: org.springframework:spring-web

### Description Applications that parse ETags from `If-Match` or `If-None-Match` request headers are vulnerable to DoS attack.

### Affected Spring Products and Versions org.springframework:spring-web in versions

6.1.0 through 6.1.11 6.0.0 through 6.0.22 5.3.0 through 5.3.37

Older, unsupported versions are also affected

### Mitigation Users of affected versions should upgrade to the corresponding fixed version. 6.1.x -> 6.1.12 6.0.x -> 6.0.23 5.3.x -> 5.3.38 No other mitigation steps are necessary.

Users of older, unsupported versions could enforce a size limit on `If-Match` and `If-None-Match` headers, e.g. through a Filter.

 https://cve.radiocsirt.org/vuln/rhsa-2024:8064 RHSA-2024:8064 — Red Hat Security Advisory: Red Hat Build of Apache Camel 4.4.3 for Spring Boot security update. 2026-10-03T09:34:41.995677+00:00

nimbus-jose-jwt: large JWE p2c header value causes Denial of Service protobuf: StackOverflow vulnerability in Protocol Buffers org.springframework:spring-web: Spring Framework DoS via conditional HTTP request spring-webmvc: Path Traversal Vulnerability in Spring Applications Using RouterFunctions and FileSystemResource org.hl7.fhir.core: org.hl7.fhir.dstu3: org.hl7.fhir.r4: org.hl7.fhir.r4b: org.hl7.fhir.r5: org.hl7.fhir.utilities: XXE vulnerability in XSLT transforms in `org.hl7.fhir.core` apache-avro: Schema parsing may trigger Remote Code Execution (RCE)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-38809 UBUNTU-CVE-2024-38809 2026-10-03T09:34:41.995706+00:00

Affected: Ubuntu:Pro:14.04:LTS: libspring-java, Ubuntu:Pro:16.04:LTS: libspring-java, Ubuntu:Pro:18.04:LTS: libspring-java, Ubuntu:Pro:20.04:LTS: libspring-java, Ubuntu:Pro:22.04:LTS: libspring-java, Ubuntu:Pro:24.04:LTS: libspring-java, Ubuntu:25.10: libspring-java, Ubuntu:26.04:LTS: libspring-java

Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack. Users of affected versions should upgrade to the corresponding fixed version. Users of older, unsupported versions could enforce a size limit on "If-Match" and "If-None-Match" headers, e.g. through a Filter.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1853 WID-SEC-W-2024-1853 — VMware Tanzu Spring Framework: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-03T09:34:41.995738+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Framework ausnutzen, um einen Denial of Service Angriff durchzuführen.