https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T13:48:19.177457+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0705 certfr-2026-avi-0705 — De multiples vulnérabilités ont été découvertes dans les produits Spring. Certaines d'entre elles permettent à un attaq… 2026-10-06T13:48:19.228220+00:00 certfr-2026-avi-0705 https://cve.radiocsirt.org/vuln/euvd-2026-330894 EUVD-2026-330894 2026-10-06T13:48:19.228266+00:00 EUVD-2026-330894 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40991 fkie_cve-2026-40991 2026-10-06T13:48:19.228281+00:00

When using spring-restdocs-webtestclient or spring-restdocs-restassured to document a remote API accessed over HTTP, an attacker who compromises the API or tricks the user into documenting a malicious API can perform an XXE injection attack when the documentation-generating tests are next executed.

Affected versions: Spring REST Docs 4.0.0; 3.0.0 through 3.0.5; 2.0.0.RELEASE through 2.0.8.RELEASE.

 https://cve.radiocsirt.org/vuln/ghsa-6rpq-6vv2-5222 GHSA-6rpq-6vv2-5222 — Spring REST Docs REST Assured & WebFlux are vulnerable to Improper Restriction of XML External Entity Reference 2026-10-06T13:48:19.228315+00:00

Affected: Maven: org.springframework.restdocs:spring-restdocs-webtestclient, Maven: org.springframework.restdocs:spring-restdocs-restassured

When using spring-restdocs-webtestclient or spring-restdocs-restassured to document a remote API accessed over HTTP, an attacker who compromises the API or tricks the user into documenting a malicious API can perform an XXE injection attack when the documentation-generating tests are next executed.

Affected versions: Spring REST Docs 4.0.0; 3.0.0 through 3.0.5; 2.0.0.RELEASE through 2.0.8.RELEASE.