https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:34:05.449278+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0991 certfr-2026-avi-0991 — De multiples vulnérabilités ont été découvertes dans VMware Tanzu Greenplum. Elles permettent à un attaquant de provoqu… 2026-10-02T22:34:05.471699+00:00 certfr-2026-avi-0991 https://cve.radiocsirt.org/vuln/cleanstart-2026-ag15773 Withdrawn: CLEANSTART-2026-AG15773 — Security fixes in apache-hive 4.2.0-r4 2026-10-02T22:34:05.471769+00:00

Withdrawn by the publisher.

Affected: CleanStart: apache-hive

Package apache-hive version 4.2.0-r4 fixes 2 vulnerabilities: CVE-2026-45205, CVE-2026-45300

 https://cve.radiocsirt.org/vuln/cnvd-2026-21824 cnvd-2026-21824 2026-10-02T22:34:05.471834+00:00 cnvd-2026-21824 https://cve.radiocsirt.org/vuln/euvd-2026-318665 EUVD-2026-318665 2026-10-02T22:34:05.471857+00:00 EUVD-2026-318665 https://cve.radiocsirt.org/vuln/fkie_cve-2026-45205 fkie_cve-2026-45205 2026-10-02T22:34:05.471870+00:00

Uncontrolled Recursion vulnerability in Apache Commons.

When processing an untrusted configuration file, Commons Configuration will throw a StackOverflowError for YAML input with cycles. This issue affects Apache Commons: from 2.2 before 2.15.0.

Users are recommended to upgrade to version 2.15.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-337m-mw94-2v6g GHSA-337m-mw94-2v6g — Apache Commons Configuration: StackOverflowError for YAML input with cycles 2026-10-02T22:34:05.471897+00:00

Affected: Maven: org.apache.commons:commons-configuration2

Uncontrolled Recursion vulnerability in Apache Commons.

When processing an untrusted configuration file, Commons Configuration will throw a StackOverflowError for YAML input with cycles. This issue affects Apache Commons: from 2.2 before 2.15.0.

Users are recommended to upgrade to version 2.15.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:10784-1 openSUSE-SU-2026:10784-1 — apache-commons-configuration2-2.15.0-1.1 on GA media 2026-10-02T22:34:05.471921+00:00

apache-commons-configuration2-2.15.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:54622 RHSA-2026:54622 — Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18.3 for Spring Boot release. 2026-10-02T22:34:05.471941+00:00

eclipse-vertx/vert.x: eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name io.vertx/vertx-web: Eclipse Vert.x Web Client: Information disclosure via improper cookie domain validation org.apache.camel/camel-vertx-http: Apache Camel (camel-vertx-http): Remote Code Execution via Deserialization of Untrusted Data camel-jms: Apache Camel JMS components: Arbitrary Exchange state injection io.netty/netty-codec-stomp: Netty: Denial of Service vulnerability in STOMP decoder commons-configuration: Apache Commons Configuration: Denial of Service via uncontrolled recursion with crafted YAML input org.apache.camel/camel-mail: Apache Camel Mail Component: Credential exposure and information disclosure via improper input validation of mail headers org.apache.camel/camel-cxf: Apache Camel CXF SOAP: Remote attacker can execute unintended operations via header manipulation camel-vertx-websocket: Apache Camel Vertx Websocket: Server-Side Request Forgery and sensitive data exposure jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass jackson-databind: Jackson-databind: Security bypass allow…

 https://cve.radiocsirt.org/vuln/suse-su-2026:21996-1 SUSE-SU-2026:21996-1 — Security update for apache-commons-lang3, apache-commons-text, apache-commons-configuration2, apache-commons-cli, apach… 2026-10-02T22:34:05.472008+00:00

Security update for apache-commons-lang3, apache-commons-text, apache-commons-configuration2, apache-commons-cli, apache-commons-io, apache-commons-codec

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-45205 UBUNTU-CVE-2026-45205 2026-10-02T22:34:05.472027+00:00

Affected: Ubuntu:14.04:LTS: commons-configuration, Ubuntu:16.04:LTS: commons-configuration, Ubuntu:18.04:LTS: commons-configuration, Ubuntu:18.04:LTS: commons-configuration2, Ubuntu:20.04:LTS: commons-configuration, Ubuntu:20.04:LTS: commons-configuration2, Ubuntu:22.04:LTS: commons-configuration, Ubuntu:22.04:LTS: commons-configuration2, Ubuntu:24.04:LTS: commons-configuration, Ubuntu:24.04:LTS: commons-configuration2 and 4 more

Uncontrolled Recursion vulnerability in Apache Commons. When processing an untrusted configuration file, Commons Configuration will throw a StackOverflowError for YAML input with cycles. This issue affects Apache Commons: from 2.2 before 2.15.0. Users are recommended to upgrade to version 2.15.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1539 WID-SEC-W-2026-1539 — Apache Commons: Schwachstelle ermöglicht Denial of Service 2026-10-02T22:34:05.472066+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Commons ausnutzen, um einen Denial of Service Angriff durchzuführen.