https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T18:47:08.068788+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2024-33807 cnvd-2024-33807 2026-10-08T18:47:08.143277+00:00 cnvd-2024-33807 https://cve.radiocsirt.org/vuln/euvd-2026-216933 EUVD-2026-216933 2026-10-08T18:47:08.143320+00:00 EUVD-2026-216933 https://cve.radiocsirt.org/vuln/fkie_cve-2023-48362 fkie_cve-2023-48362 2026-10-08T18:47:08.143334+00:00

XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file system or execute commands via a malicious XML file. Users are recommended to upgrade to version 1.21.2, which fixes this issue.

 https://cve.radiocsirt.org/vuln/ghsa-v62g-jwj9-rfvx GHSA-v62g-jwj9-rfvx — XML External Entity Reference (XXE) in the XML Format Plugin in Apache Drill 2026-10-08T18:47:08.143366+00:00

Affected: Maven: org.apache.drill.exec:drill-java-exec

XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file system or execute commands via a malicious XML file. Users are recommended to upgrade to version 1.21.2, which fixes this issue.

 https://cve.radiocsirt.org/vuln/gsd-2023-48362 gsd-2023-48362 2026-10-08T18:47:08.143391+00:00 gsd-2023-48362