https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T16:14:31.374373+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-26375 EUVD-2026-26375 2026-10-15T16:14:31.378409+00:00 EUVD-2026-26375 https://cve.radiocsirt.org/vuln/fkie_cve-2021-29506 fkie_cve-2021-29506 2026-10-15T16:14:31.378452+00:00

GraphHopper is an open-source Java routing engine. In GrassHopper from version 2.0 and before version 2.4, there is a regular expression injection vulnerability that may lead to Denial of Service. This has been patched in 2.4 and 3.0 See this pull request for the fix: https://github.com/graphhopper/graphhopper/pull/2304

 https://cve.radiocsirt.org/vuln/ghsa-hf44-3mx6-vhhw GHSA-hf44-3mx6-vhhw — Navigate endpoint is vulnerable to regex injection that may lead to Denial of Service. 2026-10-15T16:14:31.378540+00:00

Affected: Maven: com.graphhopper:graphhopper-nav

### Impact The regex injection that may lead to Denial of Service.

### Patches Will be patched in 2.4 and 3.0

### Workarounds Versions lower than 2.x are only affected if the navigation module is added

### References See this pull request for the fix: https://github.com/graphhopper/graphhopper/pull/2304

If you have any questions or comments about this advisory please [send us an Email](https://www.graphhopper.com/contact-form/) or create a topic [here](https://discuss.graphhopper.com/).

 https://cve.radiocsirt.org/vuln/gsd-2021-29506 gsd-2021-29506 2026-10-15T16:14:31.378590+00:00 gsd-2021-29506