https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T16:50:43.479728+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-17531 CVE-2020-17531 — Deserialization flaw in EOL Tapestry 4. 2026-10-18T16:50:43.480942+00:00

Affected: Apache Software Foundation Apache Tapestry

A Java Serialization vulnerability was found in Apache Tapestry 4. Apache Tapestry 4 will attempt to deserialize the "sp" parameter even before invoking the page's validate method, leading to deserialization without authentication. Apache Tapestry 4 reached end of life in 2008 and no update to address this issue will be released. Apache Tapestry 5 versions are not vulnerable to this issue. Users of Apache Tapestry 4 should upgrade to the latest Apache Tapestry 5 version.