https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T22:45:59.226901+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-349399 EUVD-2026-349399 2026-10-08T22:45:59.228984+00:00 EUVD-2026-349399 https://cve.radiocsirt.org/vuln/fkie_cve-2026-71559 fkie_cve-2026-71559 2026-10-08T22:45:59.229023+00:00

Deserialization of Untrusted Data vulnerability in the Go implementation of Apache Fory allows an attacker to cause a denial of service by supplying crafted data containing malformed type metadata, which triggers an uncaught panic.

This issue affects Apache Fory: from 0.16.0 before 1.5.0.  Users of other language implementations are not affected.

Users are recommended to upgrade to version 1.5.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-63m9-m4r7-4qjg GHSA-63m9-m4r7-4qjg 2026-10-08T22:45:59.229060+00:00

Deserialization of Untrusted Data vulnerability in the Go implementation of Apache Fory allows an attacker to cause a denial of service by supplying crafted data containing malformed type metadata, which triggers an uncaught panic.

This issue affects Apache Fory: from 0.16.0 before 1.5.0.  Users of other language implementations are not affected.

Users are recommended to upgrade to version 1.5.0, which fixes the issue.