https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T08:34:51.935099+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-336525 EUVD-2026-336525 2026-10-06T08:34:51.981544+00:00 EUVD-2026-336525 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22186 fkie_cve-2026-22186 2026-10-06T08:34:51.981580+00:00

Bio-Formats versions up to and including 8.3.0 contain an XML External Entity (XXE) vulnerability in the Leica Microsystems metadata parsing component (e.g., XLEF). The parser uses an insecurely configured DocumentBuilderFactory when processing Leica XML-based metadata files, allowing external entity expansion and external DTD loading. A crafted metadata file can trigger outbound network requests (SSRF), access local system resources where readable, or cause a denial of service during XML parsing.

 https://cve.radiocsirt.org/vuln/ghsa-fcqj-76g3-q7qm GHSA-fcqj-76g3-q7qm — Bio-Formats has an XML External Entity (XXE) vulnerability 2026-10-06T08:34:51.981615+00:00

Affected: Maven: ome:pom-bio-formats

Bio-Formats versions up to and including 8.3.0 contain an XML External Entity (XXE) vulnerability in the Leica Microsystems metadata parsing component (e.g., XLEF). The parser uses an insecurely configured DocumentBuilderFactory when processing Leica XML-based metadata files, allowing external entity expansion and external DTD loading. A crafted metadata file can trigger outbound network requests (SSRF), access local system resources where readable, or cause a denial of service during XML parsing.