https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 07:00:36 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-05482 bdu:2022-05482 https://cve.radiocsirt.org/vuln/bdu:2022-05482 https://cve.radiocsirt.org/vuln/cnvd-2022-83595 cnvd-2022-83595 https://cve.radiocsirt.org/vuln/cnvd-2022-83595 https://cve.radiocsirt.org/vuln/euvd-2026-18711 EUVD-2026-18711 https://cve.radiocsirt.org/vuln/euvd-2026-18711 https://cve.radiocsirt.org/vuln/fkie_cve-2022-37022 <p>Apache Geode versions up to 1.12.2 and 1.13.2 are vulnerable to a deserialization of untrusted data flaw when using JMX over RMI on Java 11. Any user wishing to protect against deserialization attacks involving JMX or RMI should upgrade to Apache Geode 1.15. Use of 1.15 on Java 11 will automatically protect JMX over RMI against deserialization attacks. This should have no impact on performance since it only affects JMX/RMI which Gfsh uses to communicate with the JMX Manager which is hosted on a Locator.</p> <p>Apache Geode versions up to 1.12.2 and 1.13.2 are vulnerable to a deserialization of untrusted data flaw when using JMX over RMI on Java 11. Any user wishing to protect against deserialization attacks involving JMX or RMI should upgrade to Apache Geode 1.15. Use of 1.15 on Java 11 will automatically protect JMX over RMI against deserialization attacks. This should have no impact on performance since it only affects JMX/RMI which Gfsh uses to communicate with the JMX Manager which is hosted on a Locator.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-37022 https://cve.radiocsirt.org/vuln/ghsa-qf8g-vpwp-6579 <p><strong>Affected:</strong> Maven: org.apache.geode:geode-core</p> <p>Apache Geode versions up to 1.12.2 and 1.13.2 are vulnerable to a deserialization of untrusted data flaw when using JMX over RMI on Java 11. Any user wishing to protect against deserialization attacks involving JMX or RMI should upgrade to Apache Geode 1.15. Use of 1.15 on Java 11 will automatically protect JMX over RMI against deserialization attacks. This should have no impact on performance since it only affects JMX/RMI which Gfsh uses to communicate with the JMX Manager which is hosted on a Locator.</p> <p><strong>Affected:</strong> Maven: org.apache.geode:geode-core</p> <p>Apache Geode versions up to 1.12.2 and 1.13.2 are vulnerable to a deserialization of untrusted data flaw when using JMX over RMI on Java 11. Any user wishing to protect against deserialization attacks involving JMX or RMI should upgrade to Apache Geode 1.15. Use of 1.15 on Java 11 will automatically protect JMX over RMI against deserialization attacks. This should have no impact on performance since it only affects JMX/RMI which Gfsh uses to communicate with the JMX Manager which is hosted on a Locator.</p> https://cve.radiocsirt.org/vuln/ghsa-qf8g-vpwp-6579 https://cve.radiocsirt.org/vuln/gsd-2022-37022 gsd-2022-37022 https://cve.radiocsirt.org/vuln/gsd-2022-37022