https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T14:11:34.037496+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0986 certfr-2026-avi-0986 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-02T14:11:34.172941+00:00 certfr-2026-avi-0986 https://cve.radiocsirt.org/vuln/cleanstart-2026-am39668 Withdrawn: CLEANSTART-2026-AM39668 — yawkat LZ4 Java provides LZ4 compression for Java 2026-10-02T14:11:34.172992+00:00

Withdrawn by the publisher.

Affected: CleanStart: apache-nifi

Multiple security vulnerabilities affect the apache-nifi package. yawkat LZ4 Java provides LZ4 compression for Java. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-331938 EUVD-2026-331938 2026-10-02T14:11:34.173026+00:00 EUVD-2026-331938 https://cve.radiocsirt.org/vuln/fkie_cve-2026-54399 fkie_cve-2026-54399 2026-10-02T14:11:34.173040+00:00

Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents Core (5.4.2 and earlier, 5.5-beta1 and earlier) allows an remote attacker to cause a denial of service through memory exhaustion by sending messages with excessive number of headers / excessive header length

 https://cve.radiocsirt.org/vuln/ghsa-hf6x-8p5f-cgmf GHSA-hf6x-8p5f-cgmf — Apache HttpComponents Core HTTP/1 header parsing can cause memory-exhaustion denial of service 2026-10-02T14:11:34.173063+00:00

Affected: Maven: org.apache.httpcomponents.core5:httpcore5

Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents Core (5.4.2 and earlier, 5.5-beta1 and earlier) allows a remote attacker to cause a denial of service through memory exhaustion by sending messages with excessive number of headers / excessive header length

 https://cve.radiocsirt.org/vuln/rhsa-2026:47172 RHSA-2026:47172 — Red Hat Security Advisory: Red Hat build of Quarkus 3.33.2.SP3 security update 2026-10-02T14:11:34.173086+00:00

vertx-core: Eclipse Vert.x: Information disclosure via improper handling of HTTP 30x redirects io.vertx/vertx-web: Eclipse Vert.x Web Client: Information disclosure via improper cookie domain validation io.quarkus/quarkus-rest: io.quarkus/quarkus-vertx-http: io.quarkus.resteasy.reactive/resteasy-reactive: Quarkus REST - Unbounded multipart MIME part-header accumulation allows remote OOM denial of service org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification io.netty/netty-codec-haproxy: Netty codec-haproxy: Denial of Service via crafted PROXY protocol v2 message netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket) io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb) io.netty/netty-codec-http2: Netty: Improper header neutrali…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-54399 UBUNTU-CVE-2026-54399 2026-10-02T14:11:34.173133+00:00

Affected: Ubuntu:14.04:LTS: httpcomponents-core, Ubuntu:16.04:LTS: httpcomponents-core, Ubuntu:18.04:LTS: httpcomponents-core, Ubuntu:20.04:LTS: httpcomponents-core, Ubuntu:22.04:LTS: httpcomponents-core, Ubuntu:22.04:LTS: httpcomponents-core5, Ubuntu:24.04:LTS: httpcomponents-core, Ubuntu:24.04:LTS: httpcomponents-core5, Ubuntu:25.10: httpcomponents-core, Ubuntu:25.10: httpcomponents-core5 and 2 more

Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents Core (5.4.2 and earlier, 5.5-beta1 and earlier) allows an remote attacker to cause a denial of service through memory exhaustion by sending messages with excessive number of headers / excessive header length

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2172 WID-SEC-W-2026-2172 — Apache HttpComponents Core: Mehrere Schwachstellen ermöglichen Denial of Service 2026-10-02T14:11:34.173171+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache HttpComponents Core ausnutzen, um einen Denial of Service Angriff durchzuführen.