https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T02:48:32.777651+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cleanstart-2026-ah35927 Withdrawn: CLEANSTART-2026-AH35927 — DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used w… 2026-10-04T02:48:32.873877+00:00

Withdrawn by the publisher.

Affected: CleanStart: wso2is

Multiple security vulnerabilities affect the wso2is package. DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-365046 EUVD-2026-365046 2026-10-04T02:48:32.873933+00:00 EUVD-2026-365046 https://cve.radiocsirt.org/vuln/fkie_cve-2026-19203 fkie_cve-2026-19203 2026-10-04T02:48:32.873950+00:00

A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret different request boundaries, potentially resulting in HTTP request smuggling.

This is caused by Jetty accepting a lone LF character as a terminator in parts of chunked request parsing. Depending on the Jetty version and configured HTTP compliance mode, this may occur in chunk extensions, chunk data termination, or trailer termination.

 https://cve.radiocsirt.org/vuln/ghsa-p2j5-5566-vpv9 GHSA-p2j5-5566-vpv9 2026-10-04T02:48:32.873977+00:00

A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret different request boundaries, potentially resulting in HTTP request smuggling.

This is caused by Jetty accepting a lone LF character as a terminator in parts of chunked request parsing. Depending on the Jetty version and configured HTTP compliance mode, this may occur in chunk extensions, chunk data termination, or trailer termination.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-19203 UBUNTU-CVE-2026-19203 2026-10-04T02:48:32.873995+00:00

Affected: Ubuntu:14.04:LTS: jetty, Ubuntu:16.04:LTS: jetty, Ubuntu:16.04:LTS: jetty9, Ubuntu:18.04:LTS: jetty9, Ubuntu:20.04:LTS: jetty9, Ubuntu:22.04:LTS: jetty9, Ubuntu:24.04:LTS: jetty9, Ubuntu:26.04:LTS: jetty12, Ubuntu:26.04:LTS: jetty9

A client may issue specially crafted HTTP/1.1 chunked requests to a Jetty server that cause Jetty and an intermediary proxy to interpret different request boundaries, potentially resulting in HTTP request smuggling. This is caused by Jetty accepting a lone LF character as a terminator in parts of chunked request parsing. Depending on the Jetty version and configured HTTP compliance mode, this may occur in chunk extensions, chunk data termination, or trailer termination.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3434 WID-SEC-W-2026-3434 — Eclipse Jetty: Schwachstelle ermöglicht Darstellen falscher Informationen und Offenlegung 2026-10-04T02:48:32.874027+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Eclipse Jetty ausnutzen, um falsche Informationen darzustellen und Informationen offenzulegen.