https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:41:38 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-179218 EUVD-2026-179218 https://cve.radiocsirt.org/vuln/euvd-2026-179218 https://cve.radiocsirt.org/vuln/fkie_cve-2020-5404 <p>The HttpClient from Reactor Netty, versions 0.9.x prior to 0.9.5, and versions 0.8.x prior to 0.8.16, may be used incorrectly, leading to a credentials leak during a redirect to a different domain. In order for this to happen, the HttpClient must have been explicitly configured to follow redirects.</p> <p>The HttpClient from Reactor Netty, versions 0.9.x prior to 0.9.5, and versions 0.8.x prior to 0.8.16, may be used incorrectly, leading to a credentials leak during a redirect to a different domain. In order for this to happen, the HttpClient must have been explicitly configured to follow redirects.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-5404 https://cve.radiocsirt.org/vuln/ghsa-gpch-h32j-gx6x <p><strong>Affected:</strong> Maven: io.projectreactor.netty:reactor-netty-http</p> <p>The HttpClient from Reactor Netty, versions 0.9.x prior to 0.9.5, and versions 0.8.x prior to 0.8.16, may be used incorrectly, leading to a credentials leak during a redirect to a different domain. In order for this to happen, the HttpClient must have been explicitly configured to follow redirects.</p> <p><strong>Affected:</strong> Maven: io.projectreactor.netty:reactor-netty-http</p> <p>The HttpClient from Reactor Netty, versions 0.9.x prior to 0.9.5, and versions 0.8.x prior to 0.8.16, may be used incorrectly, leading to a credentials leak during a redirect to a different domain. In order for this to happen, the HttpClient must have been explicitly configured to follow redirects.</p> https://cve.radiocsirt.org/vuln/ghsa-gpch-h32j-gx6x https://cve.radiocsirt.org/vuln/gsd-2020-5404 gsd-2020-5404 https://cve.radiocsirt.org/vuln/gsd-2020-5404 https://cve.radiocsirt.org/vuln/rhsa-2022:8761 <p>reactor-netty: specific redirect configuration allows for a credentials leak kubernetes-client: Insecure deserialization in unmarshalYaml method protobuf-java: potential DoS in the parsing procedure for binary data undertow: potential security issue in flow control over HTTP/2 may lead to DOS(incomplete fix for CVE-2021-3629) undertow: Double AJP response for 400 from EAP 7 results in CPING failures spring-expression: Denial of service via specially crafted SpEL expression</p> <p>reactor-netty: specific redirect configuration allows for a credentials leak kubernetes-client: Insecure deserialization in unmarshalYaml method protobuf-java: potential DoS in the parsing procedure for binary data undertow: potential security issue in flow control over HTTP/2 may lead to DOS(incomplete fix for CVE-2021-3629) undertow: Double AJP response for 400 from EAP 7 results in CPING failures spring-expression: Denial of service via specially crafted SpEL expression</p> https://cve.radiocsirt.org/vuln/rhsa-2022:8761