https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:05:39 +0000 https://cve.radiocsirt.org/vuln/certfr-2022-avi-952 certfr-2022-avi-952 https://cve.radiocsirt.org/vuln/certfr-2022-avi-952 https://cve.radiocsirt.org/vuln/euvd-2026-16419 EUVD-2026-16419 https://cve.radiocsirt.org/vuln/euvd-2026-16419 https://cve.radiocsirt.org/vuln/fkie_cve-2022-30126 <p>In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler. This is fixed in 1.28.2 and 2.4.0</p> <p>In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler. This is fixed in 1.28.2 and 2.4.0</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-30126 https://cve.radiocsirt.org/vuln/ghsa-rpjm-422r-95mh <p><strong>Affected:</strong> Maven: org.apache.tika:tika-core</p> <p>In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler.</p> <p>This was originally fixed in 1.28.2 and 2.4.0. While the fix in version 2.4.0 was complete, the fix for the 1.x branch wasn&#39;t incorporated until version 1.28.3. Please see GHSA-qw3f-w4pf-jh5f for more information.</p> <p><strong>Affected:</strong> Maven: org.apache.tika:tika-core</p> <p>In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler.</p> <p>This was originally fixed in 1.28.2 and 2.4.0. While the fix in version 2.4.0 was complete, the fix for the 1.x branch wasn&#39;t incorporated until version 1.28.3. Please see GHSA-qw3f-w4pf-jh5f for more information.</p> https://cve.radiocsirt.org/vuln/ghsa-rpjm-422r-95mh https://cve.radiocsirt.org/vuln/gsd-2022-30126 gsd-2022-30126 https://cve.radiocsirt.org/vuln/gsd-2022-30126 https://cve.radiocsirt.org/vuln/rhsa-2022:5532 <p>elasticsearch: not properly preserving security permissions when executing complex queries may lead to information disclosure tomcat: deserialization flaw in session persistence storage leading to RCE junit4: TemporaryFolder is shared between all users across system which could result in information disclosure wildfly-core: memory leak in WildFly host-controller in domain mode while not able to reconnect to domain-controller kotlin: vulnerable Java API was used for temporary file and folder creation which could result in information disclosure jackson-databind: denial of service via a large depth of nested objects mysql-connector-java: unauthorized access to critical undertow: potential security issue in flow control over HTTP/2 may lead to DOS wildfly-elytron: possible timing attack in ScramServer wildfly-core: Invalid Sensitivity Classification of Vault Expression nodejs-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes undertow: client side invocation timeout raised when calling over HTTP2 kubernetes-client: Insecure deserialization in unmarshalYaml method springframework: Additional Log Injection in Spring Framework (follow-up to CVE-2021-22096) springframework: malicious input leads to insertion of additional log entries spring-security: Denial-of-Service (DoS) attack via initiation of Authorization Request protobuf-java: potential DoS in the parsing procedure for binary data google-oauth-client: Token signature not verified tomcat: Inf…</p> <p>elasticsearch: not properly preserving security permissions when executing complex queries may lead to information disclosure tomcat: deserialization flaw in session persistence storage leading to RCE junit4: TemporaryFolder is shared between all users across system which could result in information disclosure wildfly-core: memory leak in WildFly host-controller in domain mode while not able to reconnect to domain-controller kotlin: vulnerable Java API was used for temporary file and folder creation which could result in information disclosure jackson-databind: denial of service via a large depth of nested objects mysql-connector-java: unauthorized access to critical undertow: potential security issue in flow control over HTTP/2 may lead to DOS wildfly-elytron: possible timing attack in ScramServer wildfly-core: Invalid Sensitivity Classification of Vault Expression nodejs-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes undertow: client side invocation timeout raised when calling over HTTP2 kubernetes-client: Insecure deserialization in unmarshalYaml method springframework: Additional Log Injection in Spring Framework (follow-up to CVE-2021-22096) springframework: malicious input leads to insertion of additional log entries spring-security: Denial-of-Service (DoS) attack via initiation of Authorization Request protobuf-java: potential DoS in the parsing procedure for binary data google-oauth-client: Token signature not verified tomcat: Inf…</p> https://cve.radiocsirt.org/vuln/rhsa-2022:5532 https://cve.radiocsirt.org/vuln/suse-su-2022:3310-1 <p>Security update for tika-core</p> <p>Security update for tika-core</p> https://cve.radiocsirt.org/vuln/suse-su-2022:3310-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-30126 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: tika, Ubuntu:18.04:LTS: tika, Ubuntu:Pro:20.04:LTS: tika, Ubuntu:Pro:22.04:LTS: tika, Ubuntu:24.04:LTS: tika, Ubuntu:25.10: tika, Ubuntu:26.04:LTS: tika</p> <p>In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler. This is fixed in 1.28.2 and 2.4.0</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: tika, Ubuntu:18.04:LTS: tika, Ubuntu:Pro:20.04:LTS: tika, Ubuntu:Pro:22.04:LTS: tika, Ubuntu:24.04:LTS: tika, Ubuntu:25.10: tika, Ubuntu:26.04:LTS: tika</p> <p>In Apache Tika, a regular expression in our StandardsText class, used by the StandardsExtractingContentHandler could lead to a denial of service caused by backtracking on a specially crafted file. This only affects users who are running the StandardsExtractingContentHandler, which is a non-standard handler. This is fixed in 1.28.2 and 2.4.0</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-30126 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0607 <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat FUSE ausnutzen, um vertrauliche Informationen offenzulegen, beliebigen Code auszuführen, einen Denial of Service Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, Daten und Informationen zu manipulieren und seine Privilegien zu erweitern.</p> <p>Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in Red Hat FUSE ausnutzen, um vertrauliche Informationen offenzulegen, beliebigen Code auszuführen, einen Denial of Service Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, Daten und Informationen zu manipulieren und seine Privilegien zu erweitern.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0607