https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 00:26:58 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-40022 EUVD-2026-40022 https://cve.radiocsirt.org/vuln/euvd-2026-40022 https://cve.radiocsirt.org/vuln/fkie_cve-2020-10721 <p>A flaw was found in the fabric8-maven-plugin 4.0.0 and later. When using a wildfly-swarm or thorntail custom configuration, a malicious YAML configuration file on the local machine executing the maven plug-in could allow for deserialization of untrusted data resulting in arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> <p>A flaw was found in the fabric8-maven-plugin 4.0.0 and later. When using a wildfly-swarm or thorntail custom configuration, a malicious YAML configuration file on the local machine executing the maven plug-in could allow for deserialization of untrusted data resulting in arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-10721 https://cve.radiocsirt.org/vuln/ghsa-w7gj-h6f2-x4c6 <p><strong>Affected:</strong> Maven: io.fabric8:fabric8-maven-plugin</p> <p>A flaw was found in the fabric8-maven-plugin 4.0.0 and later. When using a wildfly-swarm or thorntail custom configuration, a malicious YAML configuration file on the local machine executing the maven plug-in could allow for deserialization of untrusted data resulting in arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> <p>The fabric8-maven-plugin has been superseded by the Eclipse project JKube and the recommendation is migrating users of the fabric8-maven-plugin to Eclipse Jkube &gt;= 1.0.0</p> <p><strong>Affected:</strong> Maven: io.fabric8:fabric8-maven-plugin</p> <p>A flaw was found in the fabric8-maven-plugin 4.0.0 and later. When using a wildfly-swarm or thorntail custom configuration, a malicious YAML configuration file on the local machine executing the maven plug-in could allow for deserialization of untrusted data resulting in arbitrary code execution. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.</p> <p>The fabric8-maven-plugin has been superseded by the Eclipse project JKube and the recommendation is migrating users of the fabric8-maven-plugin to Eclipse Jkube &gt;= 1.0.0</p> https://cve.radiocsirt.org/vuln/ghsa-w7gj-h6f2-x4c6 https://cve.radiocsirt.org/vuln/gsd-2020-10721 gsd-2020-10721 https://cve.radiocsirt.org/vuln/gsd-2020-10721