https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T04:56:26.310058+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-09631 cnvd-2020-09631 2026-10-17T04:56:26.459879+00:00 cnvd-2020-09631 https://cve.radiocsirt.org/vuln/euvd-2026-58400 EUVD-2026-58400 2026-10-17T04:56:26.459938+00:00 EUVD-2026-58400 https://cve.radiocsirt.org/vuln/fkie_cve-2019-17554 fkie_cve-2019-17554 2026-10-17T04:56:26.459983+00:00

The XML content type entity deserializer in Apache Olingo versions 4.0.0 to 4.6.0 is not configured to deny the resolution of external entities. Request with content type "application/xml", which trigger the deserialization of entities, can be used to trigger XXE attacks.

 https://cve.radiocsirt.org/vuln/ghsa-mgh8-hcwj-h57v GHSA-mgh8-hcwj-h57v — Improper Restriction of XML External Entity Reference in Apache Olingo 2026-10-17T04:56:26.460032+00:00

Affected: Maven: org.apache.olingo:odata-client-core, Maven: org.apache.olingo:odata-server-core

The XML content type entity deserializer in Apache Olingo versions 4.0.0 to 4.6.0 is not configured to deny the resolution of external entities. Request with content type "application/xml", which trigger the deserialization of entities, can be used to trigger XXE attacks.

 https://cve.radiocsirt.org/vuln/gsd-2019-17554 gsd-2019-17554 2026-10-17T04:56:26.460077+00:00 gsd-2019-17554