https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 21:53:18 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-00960 bdu:2021-00960 https://cve.radiocsirt.org/vuln/bdu:2021-00960 https://cve.radiocsirt.org/vuln/certfr-2021-avi-951 certfr-2021-avi-951 https://cve.radiocsirt.org/vuln/certfr-2021-avi-951 https://cve.radiocsirt.org/vuln/cnvd-2020-70849 cnvd-2020-70849 https://cve.radiocsirt.org/vuln/cnvd-2020-70849 https://cve.radiocsirt.org/vuln/euvd-2026-43752 EUVD-2026-43752 https://cve.radiocsirt.org/vuln/euvd-2026-43752 https://cve.radiocsirt.org/vuln/fkie_cve-2020-17521 <p>Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy&#39;s implementation of those extension methods was using a now superseded Java JDK method call that is potentially not secure on some operating systems in some contexts. Users not using the extension methods mentioned in the advisory are not affected, but may wish to read the advisory for further details. Versions Affected: 2.0 to 2.4.20, 2.5.0 to 2.5.13, 3.0.0 to 3.0.6, and 4.0.0-alpha-1. Fixed in versions 2.4.21, 2.5.14, 3.0.7, 4.0.0-alpha-2.</p> <p>Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy&#39;s implementation of those extension methods was using a now superseded Java JDK method call that is potentially not secure on some operating systems in some contexts. Users not using the extension methods mentioned in the advisory are not affected, but may wish to read the advisory for further details. Versions Affected: 2.0 to 2.4.20, 2.5.0 to 2.5.13, 3.0.0 to 3.0.6, and 4.0.0-alpha-1. Fixed in versions 2.4.21, 2.5.14, 3.0.7, 4.0.0-alpha-2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-17521 https://cve.radiocsirt.org/vuln/ghsa-rcjj-h6gh-jf3r <p><strong>Affected:</strong> Maven: org.codehaus.groovy:groovy, Maven: org.codehaus.groovy:groovy-all</p> <p>Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy&#39;s implementation of those extension methods was using a now superseded Java JDK method call that is potentially not secure on some operating systems in some contexts. Users not using the extension methods mentioned in the advisory are not affected, but may wish to read the advisory for further details. Versions Affected: 2.0 to 2.4.20, 2.5.0 to 2.5.13, 3.0.0 to 3.0.6, and 4.0.0-alpha-1. Fixed in versions 2.4.21, 2.5.14, 3.0.7, 4.0.0-alpha-2.</p> <p><strong>Affected:</strong> Maven: org.codehaus.groovy:groovy, Maven: org.codehaus.groovy:groovy-all</p> <p>Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy&#39;s implementation of those extension methods was using a now superseded Java JDK method call that is potentially not secure on some operating systems in some contexts. Users not using the extension methods mentioned in the advisory are not affected, but may wish to read the advisory for further details. Versions Affected: 2.0 to 2.4.20, 2.5.0 to 2.5.13, 3.0.0 to 3.0.6, and 4.0.0-alpha-1. Fixed in versions 2.4.21, 2.5.14, 3.0.7, 4.0.0-alpha-2.</p> https://cve.radiocsirt.org/vuln/ghsa-rcjj-h6gh-jf3r https://cve.radiocsirt.org/vuln/gsd-2020-17521 gsd-2020-17521 https://cve.radiocsirt.org/vuln/gsd-2020-17521 https://cve.radiocsirt.org/vuln/opensuse-su-2020:2367-1 <p>Security update for groovy</p> <p>Security update for groovy</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:2367-1 https://cve.radiocsirt.org/vuln/rhsa-2021:3205 <p>activemq: improper authentication allows MITM attack cxf: XSS via the styleSheetPath apache-flink: directory traversal attack allows remote file writing through the REST API groovy: OS temporary directory leads to information disclosure XStream: remote code execution due to insecure XML deserialization when relying on blocklists cron-utils: template injection allows attackers to inject arbitrary Java EL expressions leading to remote code execution XStream: Server-Side Forgery Request vulnerability can be activated when unmarshalling XStream: arbitrary file deletion on the local host when unmarshalling californium-core: DTLS - DoS vulnerability for certificate based handshakes undertow: special character in query results in server errors bouncycastle: password bypass in OpenBSDBCrypt.checkPassword utility possible kotlin: vulnerable Java API was used for temporary file and folder creation which could result in information disclosure fabric8-kubernetes-client: vulnerable to a path traversal leading to integrity and availability compromise spring-web: (re)creating the temporary storage directory could result in a privilege escalation within WebFlux application pdfbox: infinite loop while loading a crafted PDF file pdfbox: OutOfMemory-Exception while loading a crafted PDF file CXF: Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriter pdfbox: OutOfMemory-Exception while loading a crafted PDF file</p> <p>activemq: improper authentication allows MITM attack cxf: XSS via the styleSheetPath apache-flink: directory traversal attack allows remote file writing through the REST API groovy: OS temporary directory leads to information disclosure XStream: remote code execution due to insecure XML deserialization when relying on blocklists cron-utils: template injection allows attackers to inject arbitrary Java EL expressions leading to remote code execution XStream: Server-Side Forgery Request vulnerability can be activated when unmarshalling XStream: arbitrary file deletion on the local host when unmarshalling californium-core: DTLS - DoS vulnerability for certificate based handshakes undertow: special character in query results in server errors bouncycastle: password bypass in OpenBSDBCrypt.checkPassword utility possible kotlin: vulnerable Java API was used for temporary file and folder creation which could result in information disclosure fabric8-kubernetes-client: vulnerable to a path traversal leading to integrity and availability compromise spring-web: (re)creating the temporary storage directory could result in a privilege escalation within WebFlux application pdfbox: infinite loop while loading a crafted PDF file pdfbox: OutOfMemory-Exception while loading a crafted PDF file CXF: Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriter pdfbox: OutOfMemory-Exception while loading a crafted PDF file</p> https://cve.radiocsirt.org/vuln/rhsa-2021:3205 https://cve.radiocsirt.org/vuln/suse-su-2020:3917-1 <p>Security update for groovy</p> <p>Security update for groovy</p> https://cve.radiocsirt.org/vuln/suse-su-2020:3917-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-17521 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: groovy, Ubuntu:Pro:16.04:LTS: groovy2, Ubuntu:18.04:LTS: groovy, Ubuntu:20.04:LTS: groovy, Ubuntu:22.04:LTS: groovy, Ubuntu:24.04:LTS: groovy, Ubuntu:25.10: groovy, Ubuntu:26.04:LTS: groovy</p> <p>Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy&#39;s implementation of those extension methods was using a now superseded Java JDK method call that is potentially not secure on some operating systems in some contexts. Users not using the extension methods mentioned in the advisory are not affected, but may wish to read the advisory for further details. Versions Affected: 2.0 to 2.4.20, 2.5.0 to 2.5.13, 3.0.0 to 3.0.6, and 4.0.0-alpha-1. Fixed in versions 2.4.21, 2.5.14, 3.0.7, 4.0.0-alpha-2.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: groovy, Ubuntu:Pro:16.04:LTS: groovy2, Ubuntu:18.04:LTS: groovy, Ubuntu:20.04:LTS: groovy, Ubuntu:22.04:LTS: groovy, Ubuntu:24.04:LTS: groovy, Ubuntu:25.10: groovy, Ubuntu:26.04:LTS: groovy</p> <p>Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy&#39;s implementation of those extension methods was using a now superseded Java JDK method call that is potentially not secure on some operating systems in some contexts. Users not using the extension methods mentioned in the advisory are not affected, but may wish to read the advisory for further details. Versions Affected: 2.0 to 2.4.20, 2.5.0 to 2.5.13, 3.0.0 to 3.0.6, and 4.0.0-alpha-1. Fixed in versions 2.4.21, 2.5.14, 3.0.7, 4.0.0-alpha-2.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-17521 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in JFrog Artifactory ausnutzen, um seine Privilegien zu erweitern, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen und einen Denial-of-Service-Zustand auszulösen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-1375