https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T07:10:52.517473+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2025-16959 cnvd-2025-16959 2026-10-15T07:10:52.520778+00:00 cnvd-2025-16959 https://cve.radiocsirt.org/vuln/euvd-2026-259978 EUVD-2026-259978 2026-10-15T07:10:52.520823+00:00 EUVD-2026-259978 https://cve.radiocsirt.org/vuln/fkie_cve-2025-50151 fkie_cve-2025-50151 2026-10-15T07:10:52.520848+00:00

File access paths in configuration files uploaded by users with administrator access are not validated.

This issue affects Apache Jena version up to 5.4.0.

Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload.

 https://cve.radiocsirt.org/vuln/ghsa-xg9p-p463-3qjp GHSA-xg9p-p463-3qjp — Apache Jena doesn't validate file access paths in configuration files uploaded by users with administrator access 2026-10-15T07:10:52.520892+00:00

Affected: Maven: org.apache.jena:jena

File access paths in configuration files uploaded by users with administrator access are not validated.

This issue affects Apache Jena version up to 5.4.0.

Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-50151 UBUNTU-CVE-2025-50151 2026-10-15T07:10:52.520933+00:00

Affected: Ubuntu:22.04:LTS: apache-jena, Ubuntu:24.04:LTS: apache-jena, Ubuntu:25.10: apache-jena, Ubuntu:26.04:LTS: apache-jena

File access paths in configuration files uploaded by users with administrator access are not validated. This issue affects Apache Jena version up to 5.4.0. Users are recommended to upgrade to version 5.5.0, which does not allow arbitrary configuration upload.