https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:31:25.218921+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-01707 bdu:2026-01707 2026-10-03T10:31:25.569823+00:00 bdu:2026-01707 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0316 certfr-2025-avi-0316 — De multiples vulnérabilités ont été découvertes dans les produits Atlassian. Elles permettent à un attaquant de provoqu… 2026-10-03T10:31:25.569873+00:00 certfr-2025-avi-0316 https://cve.radiocsirt.org/vuln/cleanstart-2026-be42282 CLEANSTART-2026-BE42282 — Security fix for CVE-2024-57699 applied in: apicurio-registry 3.1.7-r6 2026-10-03T10:31:25.569895+00:00

Affected: CleanStart: apicurio-registry

Security vulnerability affects the apicurio-registry package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-213953 EUVD-2026-213953 2026-10-03T10:31:25.569929+00:00 EUVD-2026-213953 https://cve.radiocsirt.org/vuln/fkie_cve-2024-57699 fkie_cve-2024-57699 2026-10-03T10:31:25.569942+00:00

A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. When loading a specially crafted JSON input, containing a large number of ’{’, a stack exhaustion can be trigger, which could allow an attacker to cause a Denial of Service (DoS). This issue exists because of an incomplete fix for CVE-2023-1370.

 https://cve.radiocsirt.org/vuln/ghsa-pq2g-wx69-c263 GHSA-pq2g-wx69-c263 — Netplex Json-smart Uncontrolled Recursion vulnerability 2026-10-03T10:31:25.569968+00:00

Affected: Maven: net.minidev:json-smart

A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. When loading a specially crafted JSON input, containing a large number of ’{’, a stack exhaustion can be trigger, which could allow an attacker to cause a Denial of Service (DoS). This issue exists because of an incomplete fix for CVE-2023-1370.

The fixed version only addresses the default modes provided by [JSONParser](https://github.com/netplex/json-smart-v2/blob/master/json-smart/src/main/java/net/minidev/json/parser/JSONParser.java#L118), such as `MODE_RFC4627`. If you create the JSONParser manually or with custom options, make sure to set the `LIMIT_JSON_DEPTH` option.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0028 NCSC-2026-0028 — Kwetsbaarheden verholpen in Oracle Analytics 2026-10-03T10:31:25.569995+00:00 NCSC-2026-0028 https://cve.radiocsirt.org/vuln/oesa-2025-1164 OESA-2025-1164 — json-smart security update 2026-10-03T10:31:25.570024+00:00

Affected: openEuler:24.03-LTS: json-smart, openEuler:24.03-LTS-SP1: json-smart, openEuler:20.03-LTS-SP4: json-smart, openEuler:22.03-LTS-SP3: json-smart, openEuler:22.03-LTS-SP4: json-smart

Json-smart is a performance focused, JSON processor lib. Security Fix(es):

A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. When loading a specially crafted JSON input, containing a large number of ’{’, a stack exhaustion can be trigger, which could allow an attacker to cause a Denial of Service (DoS). This issue exists because of an incomplete fix for CVE-2023-1370.(CVE-2024-57699)

 https://cve.radiocsirt.org/vuln/rhsa-2025:10092 RHSA-2025:10092 — Red Hat Security Advisory: Red Hat Product OCP Tools 4.18 OpenShift Jenkins security update 2026-10-03T10:31:25.570058+00:00

json-smart: Potential DoS via stack exhaustion (incomplete fix for CVE-2023-1370) jetty-http2-common: Jetty HTTP/2 Header List Size Vulnerability spring-security-core: Spring Security BCryptPasswordEncoder does not enforce maximum password length com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-57699 UBUNTU-CVE-2024-57699 2026-10-03T10:31:25.570082+00:00

Affected: Ubuntu:18.04:LTS: json-smart, Ubuntu:20.04:LTS: json-smart, Ubuntu:22.04:LTS: json-smart, Ubuntu:24.04:LTS: json-smart, Ubuntu:25.10: json-smart, Ubuntu:26.04:LTS: json-smart

A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. When loading a specially crafted JSON input, containing a large number of ’{’, a stack exhaustion can be trigger, which could allow an attacker to cause a Denial of Service (DoS). This issue exists because of an incomplete fix for CVE-2023-1370.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0801 WID-SEC-W-2025-0801 — Atlassian Bamboo: Schwachstelle ermöglicht Denial of Service 2026-10-03T10:31:25.570110+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Atlassian Bamboo ausnutzen, um einen Denial of Service Angriff durchzuführen.