https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:41:06.450297+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-kaskade-cve-2025-33042 BREW-kaskade-CVE-2025-33042 2026-10-02T11:41:06.570599+00:00

Affected: Homebrew: kaskade

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas.

This issue affects Apache Avro Java SDK: all versions through 1.11.4 and version 1.12.0.

Users are recommended to upgrade to version 1.12.1 or 1.11.5, which fix the issue.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0500 certfr-2026-avi-0500 — De multiples vulnérabilités ont été découvertes dans VMware Tanzu. Elles permettent à un attaquant de provoquer un prob… 2026-10-02T11:41:06.570655+00:00 certfr-2026-avi-0500 https://cve.radiocsirt.org/vuln/cleanstart-2026-cl03013 Withdrawn: CLEANSTART-2026-CL03013 — Netty is an asynchronous, event-driven network application framework 2026-10-02T11:41:06.570675+00:00

Withdrawn by the publisher.

Affected: CleanStart: apache-hive

Multiple security vulnerabilities affect the apache-hive package. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-268327 EUVD-2026-268327 2026-10-02T11:41:06.570696+00:00 EUVD-2026-268327 https://cve.radiocsirt.org/vuln/fkie_cve-2025-33042 fkie_cve-2025-33042 2026-10-02T11:41:06.570708+00:00

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas.

This issue affects Apache Avro Java SDK: all versions through 1.11.4 and version 1.12.0.

Users are recommended to upgrade to version 1.12.1 or 1.11.5, which fix the issue.

 https://cve.radiocsirt.org/vuln/ghsa-rp46-r563-jrc7 GHSA-rp46-r563-jrc7 — Apache Avro Java SDK is Vulnerable to Code Injection 2026-10-02T11:41:06.570733+00:00

Affected: Maven: org.apache.avro:avro-compiler

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas.

This issue affects Apache Avro Java SDK: all versions through 1.11.4 and version 1.12.0.

Users are recommended to upgrade to version 1.12.1 or 1.11.5, which fix the issue.

 https://cve.radiocsirt.org/vuln/ncsc-2026-0258 NCSC-2026-0258 — Kwetsbaarheden verholpen in Oracle Financial Services 2026-10-02T11:41:06.570756+00:00 NCSC-2026-0258 https://cve.radiocsirt.org/vuln/pysec-2026-26 PYSEC-2026-26 2026-10-02T11:41:06.570793+00:00

Affected: PyPI: avro

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas.

This issue affects Apache Avro Java SDK: all versions through 1.11.4 and version 1.12.0.

Users are recommended to upgrade to version 1.12.1 or 1.11.5, which fix the issue.

 https://cve.radiocsirt.org/vuln/rhsa-2026:7109 RHSA-2026:7109 — Red Hat Security Advisory: Red Hat build of Quarkus 3.20.6 release and security update 2026-10-02T11:41:06.570813+00:00

org.apache.avro/avro: Apache Avro Java SDK: Code injection on Java generated code org.codehaus.plexus:plexus-utils: Plexus-utils: Directory Traversal in extractFile method io.vertx/vertx-core: static handler component cache can be manipulated to deny the access to static files io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1194 WID-SEC-W-2026-1194 — Oracle Communications: Mehrere Schwachstellen 2026-10-02T11:41:06.570837+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.