https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T07:01:27.260634+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-22257 CVE-2024-22257 2026-10-08T07:01:27.376481+00:00

Affected: Spring Security, pivotal_software spring_security

In Spring Security, versions 5.7.x prior to 5.7.12, 5.8.x prior to 5.8.11, versions 6.0.x prior to 6.0.9, versions 6.1.x prior to 6.1.8, versions 6.2.x prior to 6.2.3, an application is possible vulnerable to broken access control when it directly uses the AuthenticatedVoter#vote passing a null Authentication parameter.

 https://cve.radiocsirt.org/vuln/ghsa-3677-xxcr-wjqv GHSA-3677-xxcr-wjqv — jose4j is vulnerable to DoS via compressed JWE content 2026-10-08T07:01:27.376545+00:00

Affected: Maven: org.bitbucket.b_c:jose4j

In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ratio. When this token is processed by the server, it results in significant memory allocation and processing time during decompression.