https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T11:33:45.390079+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-322479 EUVD-2026-322479 2026-10-08T11:33:45.392326+00:00 EUVD-2026-322479 https://cve.radiocsirt.org/vuln/fkie_cve-2026-44672 fkie_cve-2026-44672 2026-10-08T11:33:45.392359+00:00

mapfish-print is a component of MapFish for printing templated cartographic maps. From 3.23.0 to before 3.28.28, 3.30.30, 3.31.22, 3.33.14, and 4.0.3, the attacker can execute arbitrary code in Dynamic table without being authenticated. This vulnerability is fixed in 3.28.28, 3.30.30, 3.31.22, 3.33.14, and 4.0.3.

 https://cve.radiocsirt.org/vuln/ghsa-q7m6-wpvf-mvwx GHSA-q7m6-wpvf-mvwx — Mapfish Print: Remote Code Injection (RCE) in Dynamic table 2026-10-08T11:33:45.392390+00:00

Affected: Maven: org.mapfish.print:print-lib, Maven: org.mapfish.print:print-servlet

### Impact

The attacker can execute arbitrary code without being authenticated

### Mitigation

Upgrade to a patched version (please check affected/patched version matrix)

### Credits

Bug Bounty of Canton du Jura