https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T12:11:41.060790+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-338395 EUVD-2026-338395 2026-10-06T12:11:41.096320+00:00 EUVD-2026-338395 https://cve.radiocsirt.org/vuln/fkie_cve-2026-50124 fkie_cve-2026-50124 2026-10-06T12:11:41.096358+00:00

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase can be exploited by uploading payload.zip through the Excel upload API /datasource/upload, creating an H2 datasource that uses the zip: protocol, and executing an SQL dataset path where CalciteProvider.jdbcFetchResultField calls statement.executeQuery(), causing precompiled Java aliases in test.mv.db to execute arbitrary code. This issue is fixed in version 2.10.23.