https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T23:16:05.456752+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-10990 cnvd-2017-10990 2026-10-24T23:16:05.461780+00:00 cnvd-2017-10990 https://cve.radiocsirt.org/vuln/euvd-2026-72516 EUVD-2026-72516 2026-10-24T23:16:05.461816+00:00 EUVD-2026-72516 https://cve.radiocsirt.org/vuln/fkie_cve-2017-2773 fkie_cve-2017-2773 2026-10-24T23:16:05.461830+00:00

An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.60, 1.7.x versions prior to 1.7.41, 1.8.x versions prior to 1.8.23, and 1.9.x versions prior to 1.9.1. Incomplete validation logic in JSON Web Token (JWT) libraries can allow unprivileged attackers to impersonate other users in multiple components included in PCF Elastic Runtime, aka an "Unauthenticated JWT signing algorithm in multiple components" issue.

 https://cve.radiocsirt.org/vuln/ghsa-q8g2-5223-5rmm GHSA-q8g2-5223-5rmm 2026-10-24T23:16:05.461862+00:00

An issue was discovered in Pivotal PCF Elastic Runtime 1.6.x versions prior to 1.6.60, 1.7.x versions prior to 1.7.41, 1.8.x versions prior to 1.8.23, and 1.9.x versions prior to 1.9.1. Incomplete validation logic in JSON Web Token (JWT) libraries can allow unprivileged attackers to impersonate other users in multiple components included in PCF Elastic Runtime, aka an "Unauthenticated JWT signing algorithm in multiple components" issue.

 https://cve.radiocsirt.org/vuln/gsd-2017-2773 gsd-2017-2773 2026-10-24T23:16:05.461880+00:00 gsd-2017-2773