https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T23:41:47.795601+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0739 certfr-2026-avi-0739 — De multiples vulnérabilités ont été découvertes dans les produits Spring. Certaines d'entre elles permettent à un attaq… 2026-10-04T23:41:47.846426+00:00 certfr-2026-avi-0739 https://cve.radiocsirt.org/vuln/euvd-2026-329686 EUVD-2026-329686 2026-10-04T23:41:47.846467+00:00 EUVD-2026-329686 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40985 fkie_cve-2026-40985 2026-10-04T23:41:47.846482+00:00

Applications that configure the WebFlowELExpressionParser are vulnerable to the use of malicious Unified EL expressions.

Affected versions: Spring Web Flow 4.0.0; 3.0.0 through 3.0.1; 2.5.0 through 2.5.1.

 https://cve.radiocsirt.org/vuln/ghsa-9ggw-87m9-9gfc GHSA-9ggw-87m9-9gfc — Spring Web Flow has Data Binding Vulnerability with Unified EL Parser 2026-10-04T23:41:47.846510+00:00

Affected: Maven: org.springframework.webflow:spring-webflow

Applications that configure the WebFlowELExpressionParser are vulnerable to the use of malicious Unified EL expressions.

Affected versions: Spring Web Flow 4.0.0; 3.0.0 through 3.0.1; 2.5.0 through 2.5.1.