https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T15:07:34.996285+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-9757 EUVD-2026-9757 2026-10-15T15:07:35.061763+00:00 EUVD-2026-9757 https://cve.radiocsirt.org/vuln/fkie_cve-2023-46131 fkie_cve-2023-46131 2026-10-15T15:07:35.061809+00:00

Grails is a framework used to build web applications with the Groovy programming language. A specially crafted web request can lead to a JVM crash or denial of service. Any Grails framework application using Grails data binding is vulnerable. This issue has been patched in version 3.3.17, 4.1.3, 5.3.4, 6.1.0.

 https://cve.radiocsirt.org/vuln/ghsa-3pjv-r7w4-2cf5 GHSA-3pjv-r7w4-2cf5 — Grails data binding causes JVM crash and/or other denial of service 2026-10-15T15:07:35.061856+00:00

Affected: Maven: org.grails:grails-databinding

### Impact A specially crafted web request can lead to a JVM crash or denial of service. Any Grails framework application using Grails data binding is vulnerable.

### Patches Patches are available for Grails 3 and later.

### Workarounds No workaround is possible except to avoid data binding to request data.

### References

- [Blog post](https://grails.org/blog/2023-12-20-cve-data-binding-dos.html) - [Discussion](https://github.com/grails/grails-core/issues/13302) - [Mitre CVD record](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46131)

 https://cve.radiocsirt.org/vuln/gsd-2023-46131 gsd-2023-46131 2026-10-15T15:07:35.061903+00:00 gsd-2023-46131