https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:14:35 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1165 certfr-2026-avi-1165 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1165 https://cve.radiocsirt.org/vuln/cnvd-2018-09638 cnvd-2018-09638 https://cve.radiocsirt.org/vuln/cnvd-2018-09638 https://cve.radiocsirt.org/vuln/euvd-2026-164223 EUVD-2026-164223 https://cve.radiocsirt.org/vuln/euvd-2026-164223 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1259 <p>Spring Data Commons, versions 1.13 prior to 1.13.12 and 2.0 prior to 2.0.7, used in combination with XMLBeam 1.4.14 or earlier versions, contains a property binder vulnerability caused by improper restriction of XML external entity references as underlying library XMLBeam does not restrict external reference expansion. An unauthenticated remote malicious user can supply specially crafted request parameters against Spring Data&#39;s projection-based request payload binding to access arbitrary files on the system.</p> <p>Spring Data Commons, versions 1.13 prior to 1.13.12 and 2.0 prior to 2.0.7, used in combination with XMLBeam 1.4.14 or earlier versions, contains a property binder vulnerability caused by improper restriction of XML external entity references as underlying library XMLBeam does not restrict external reference expansion. An unauthenticated remote malicious user can supply specially crafted request parameters against Spring Data&#39;s projection-based request payload binding to access arbitrary files on the system.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-1259 https://cve.radiocsirt.org/vuln/ghsa-m929-7fr6-cvjg <p><strong>Affected:</strong> Maven: org.springframework.data:spring-data-commons</p> <p>Spring Data Commons, versions 1.13 prior to 1.13.12 and 2.0 prior to 2.0.7, used in combination with XMLBeam 1.4.14 or earlier versions, contains a property binder vulnerability caused by improper restriction of XML external entity references as underlying library XMLBeam does not restrict external reference expansion. An unauthenticated remote malicious user can supply specially crafted request parameters against Spring Data&#39;s projection-based request payload binding to access arbitrary files on the system.</p> <p><strong>Affected:</strong> Maven: org.springframework.data:spring-data-commons</p> <p>Spring Data Commons, versions 1.13 prior to 1.13.12 and 2.0 prior to 2.0.7, used in combination with XMLBeam 1.4.14 or earlier versions, contains a property binder vulnerability caused by improper restriction of XML external entity references as underlying library XMLBeam does not restrict external reference expansion. An unauthenticated remote malicious user can supply specially crafted request parameters against Spring Data&#39;s projection-based request payload binding to access arbitrary files on the system.</p> https://cve.radiocsirt.org/vuln/ghsa-m929-7fr6-cvjg https://cve.radiocsirt.org/vuln/gsd-2018-1259 gsd-2018-1259 https://cve.radiocsirt.org/vuln/gsd-2018-1259 https://cve.radiocsirt.org/vuln/rhsa-2018:1809 <p>spring-framework: ReDoS Attack with spring-messaging spring-data-commons: XXE with Spring Data’s XMLBeam integration spring-security-oauth: remote code execution in the authorization process</p> <p>spring-framework: ReDoS Attack with spring-messaging spring-data-commons: XXE with Spring Data’s XMLBeam integration spring-security-oauth: remote code execution in the authorization process</p> https://cve.radiocsirt.org/vuln/rhsa-2018:1809