https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-26T15:19:07.805643+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-366582 EUVD-2026-366582 2026-10-26T15:19:07.809373+00:00 EUVD-2026-366582 https://cve.radiocsirt.org/vuln/fkie_cve-2026-85228 fkie_cve-2026-85228 2026-10-26T15:19:07.809404+00:00

An integer overflow in the tensor buffer validation component in Amazon Deep Java Library (DJL) from 0.13.0 through 0.36.0 on all platforms might allow a remote unauthenticated actor to obtain information from adjacent process memory or cause a denial of service via a crafted tensor payload.

To remediate this issue, users should upgrade to version 0.37.0 or above.

 https://cve.radiocsirt.org/vuln/ghsa-5mvm-7cx8-x4wf GHSA-5mvm-7cx8-x4wf 2026-10-26T15:19:07.809437+00:00

An integer overflow in the tensor buffer validation component in Amazon Deep Java Library (DJL) from 0.13.0 through 0.36.0 on all platforms might allow a remote unauthenticated actor to obtain information from adjacent process memory or cause a denial of service via a crafted tensor payload.

To remediate this issue, users should upgrade to version 0.37.0 or above.

 https://cve.radiocsirt.org/vuln/rhsa-2026:83612 RHSA-2026:83612 — Red Hat Security Advisory: Red Hat build of Debezium 3.6.3 release 2026-10-26T15:19:07.809456+00:00

jetty-security: Eclipse Jetty: Authentication bypass via Digest authentication encoding collision jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections org.mongodb/mongodb-driver: MongoDB Driver: Credential disclosure via cleartext logging during client initialization wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: Password keyspace reduction via NFKC fullwidth folding c3p0: c3p0: Remote code execution via deserialization vulnerability io.micrometer/micrometer-registry-statsd: io.micrometer/micrometer-core: Micrometer: Line-protocol and log injection via unsanitized input allows metric and log spoofing io.netty/netty-handler: Netty: TLS hostname verification bypass via OpenSSL client path misconfiguration org.apache.httpcomponents.client5/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via incomplete fix in async JSON parser org.apache.httpcomponents.client5/httpclient5: Apache HttpComponents Client: Server impersonation via improper TLS hostname verification io.netty/netty-codec-dns: Netty: Denial of Service via Memory Leak in DNS Record Decoder with Malformed Domain Names io.netty/netty-handler: Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext zookeeper: Apache ZooKeeper: Unauthorized znode deletion via mis…