https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:36:48.749484+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cleanstart-2026-dr61127 CLEANSTART-2026-DR61127 — Security fix for CVE-2026-47848 applied in: apache-nifi 2.10.0-r8, elasticsearch 9.5.2-r2 2026-10-02T12:36:48.833643+00:00

Affected: CleanStart: apache-nifi, CleanStart: elasticsearch

CVE-2026-47848 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-359583 EUVD-2026-359583 2026-10-02T12:36:48.833717+00:00 EUVD-2026-359583 https://cve.radiocsirt.org/vuln/fkie_cve-2026-47848 fkie_cve-2026-47848 2026-10-02T12:36:48.833746+00:00

In specific scenarios involving WebSocket handshake redirects to a different origin, the Reactor Netty WebSocket client may leak credentials. In order for this to happen, the HTTP client must have been explicitly configured to follow redirects. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier

 https://cve.radiocsirt.org/vuln/ghsa-6p7h-426w-rcrx GHSA-6p7h-426w-rcrx 2026-10-02T12:36:48.833784+00:00

In specific scenarios involving WebSocket handshake redirects to a different origin, the Reactor Netty WebSocket client may leak credentials. In order for this to happen, the HTTP client must have been explicitly configured to follow redirects. Reactor Netty 1.3.0 - 1.3.6 Reactor Netty 1.1.0 - 1.2.18 Reactor Netty 1.0.52 and earlier