https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T23:50:28.285667+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-03166 bdu:2025-03166 2026-10-17T23:50:28.363713+00:00 bdu:2025-03166 https://cve.radiocsirt.org/vuln/cnvd-2025-02552 cnvd-2025-02552 2026-10-17T23:50:28.363756+00:00 cnvd-2025-02552 https://cve.radiocsirt.org/vuln/euvd-2026-209466 EUVD-2026-209466 2026-10-17T23:50:28.363771+00:00 EUVD-2026-209466 https://cve.radiocsirt.org/vuln/fkie_cve-2024-54676 fkie_cve-2024-54676 2026-10-17T23:50:28.363782+00:00

Vendor: The Apache Software Foundation

Versions Affected: Apache OpenMeetings from 2.1.0 before 8.0.0

Description: Default clustering instructions at https://openmeetings.apache.org/Clustering.html  doesn't specify white/black lists for OpenJPA this leads to possible deserialisation of untrusted data. Users are recommended to upgrade to version 8.0.0 and update their startup scripts to include the relevant 'openjpa.serialization.class.blacklist' and 'openjpa.serialization.class.whitelist' configurations as shown in the documentation.

 https://cve.radiocsirt.org/vuln/ghsa-mjf9-4pcv-vfg7 GHSA-mjf9-4pcv-vfg7 — Apache OpenMeetings vulnerable to Deserialization of Untrusted Data 2026-10-17T23:50:28.363819+00:00

Affected: Maven: org.apache.openmeetings:openmeetings-parent

Vendor: The Apache Software Foundation

Versions Affected: Apache OpenMeetings from 2.1.0 before 8.0.0

Description: Default clustering instructions at https://openmeetings.apache.org/Clustering.html  doesn't specify white/black lists for OpenJPA this leads to possible deserialisation of untrusted data. Users are recommended to upgrade to version 8.0.0 and update their startup scripts to include the relevant 'openjpa.serialization.class.blacklist' and 'openjpa.serialization.class.whitelist' configurations as shown in the documentation.