https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T16:00:12.989997+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-181758 EUVD-2026-181758 2026-10-17T16:00:12.992695+00:00 EUVD-2026-181758 https://cve.radiocsirt.org/vuln/fkie_cve-2017-17837 fkie_cve-2017-17837 2026-10-17T16:00:12.992726+00:00

The Apache DeltaSpike-JSF 1.8.0 module has a XSS injection leak in the windowId handling. The default size of the windowId get's cut off after 10 characters (by default), so the impact might be limited. A fix got applied and released in Apache deltaspike-1.8.1.

 https://cve.radiocsirt.org/vuln/ghsa-4q23-g7mf-xp98 GHSA-4q23-g7mf-xp98 — Cross-site Scripting in Apache DeltaSpike 2026-10-17T16:00:12.992756+00:00

Affected: Maven: org.apache.deltaspike.modules:jsf-module-project

The Apache DeltaSpike-JSF 1.8.0 module has a XSS injection leak in the windowId handling. The default size of the windowId get's cut off after 10 characters (by default), so the impact might be limited. A fix got applied and released in Apache deltaspike-1.8.1.

 https://cve.radiocsirt.org/vuln/gsd-2017-17837 gsd-2017-17837 2026-10-17T16:00:12.992780+00:00 gsd-2017-17837