https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T22:49:49.614000+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cleanstart-2026-am99343 CLEANSTART-2026-AM99343 — Security fix for ghsa-xwmg-2g98-w7v9 applied in: druid-fips 35.0.0-r1, kafka-ui 1.2.0-r1, kafka-ui 1.3.0-r1, stargate 1… 2026-10-14T22:49:49.671264+00:00

Affected: CleanStart: druid-fips, CleanStart: kafka-ui, CleanStart: stargate

ghsa-xwmg-2g98-w7v9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

 https://cve.radiocsirt.org/vuln/cve-2025-53864 CVE-2025-53864 2026-10-14T22:49:49.671327+00:00

Affected: Connect2id Nimbus JOSE+JWT

Connect2id Nimbus JOSE + JWT 10.0.x before 10.0.2 and 9.37.x before 9.37.4 allows a remote attacker to cause a denial of service via a deeply nested JSON object supplied in a JWT claim set, because of uncontrolled recursion. NOTE: this is independent of the Gson 2.11.0 issue because the Connect2id product could have checked the JSON object nesting depth, regardless of what limits (if any) were imposed by Gson.