https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 00:43:14 +0000 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0551 certfr-2023-avi-0551 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0551 https://cve.radiocsirt.org/vuln/euvd-2026-198509 EUVD-2026-198509 https://cve.radiocsirt.org/vuln/euvd-2026-198509 https://cve.radiocsirt.org/vuln/fkie_cve-2023-34036 <p>Reactive web applications that use Spring HATEOAS to produce hypermedia-based responses might be exposed to malicious forwarded headers if they are not behind a trusted proxy that ensures correctness of such headers, or if they don&#39;t have anything else in place to handle (and possibly discard) forwarded headers either in WebFlux or at the level of the underlying HTTP server.</p> <p>For the application to be affected, it needs to satisfy the following requirements:</p> <p>* It needs to use the reactive web stack (Spring WebFlux) and Spring HATEOAS to create links in hypermedia-based responses. * The application infrastructure does not guard against clients submitting (X-)Forwarded… headers.</p> <p>Reactive web applications that use Spring HATEOAS to produce hypermedia-based responses might be exposed to malicious forwarded headers if they are not behind a trusted proxy that ensures correctness of such headers, or if they don&#39;t have anything else in place to handle (and possibly discard) forwarded headers either in WebFlux or at the level of the underlying HTTP server.</p> <p>For the application to be affected, it needs to satisfy the following requirements:</p> <p>* It needs to use the reactive web stack (Spring WebFlux) and Spring HATEOAS to create links in hypermedia-based responses. * The application infrastructure does not guard against clients submitting (X-)Forwarded… headers.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-34036 https://cve.radiocsirt.org/vuln/ghsa-7m5c-fgwf-mwph <p><strong>Affected:</strong> Maven: org.springframework.hateoas:spring-hateoas</p> <p>Reactive web applications that use Spring HATEOAS to produce hypermedia-based responses might be exposed to malicious forwarded headers if they are not behind a trusted proxy that ensures correctness of such headers, or if they don&#39;t have anything else in place to handle (and possibly discard) forwarded headers either in WebFlux or at the level of the underlying HTTP server.</p> <p>For the application to be affected, it needs to satisfy the following requirements:</p> <p>* It needs to use the reactive web stack (Spring WebFlux) and Spring HATEOAS to create links in hypermedia-based responses. * The application infrastructure does not guard against clients submitting (X-)Forwarded… headers.</p> <p><strong>Affected:</strong> Maven: org.springframework.hateoas:spring-hateoas</p> <p>Reactive web applications that use Spring HATEOAS to produce hypermedia-based responses might be exposed to malicious forwarded headers if they are not behind a trusted proxy that ensures correctness of such headers, or if they don&#39;t have anything else in place to handle (and possibly discard) forwarded headers either in WebFlux or at the level of the underlying HTTP server.</p> <p>For the application to be affected, it needs to satisfy the following requirements:</p> <p>* It needs to use the reactive web stack (Spring WebFlux) and Spring HATEOAS to create links in hypermedia-based responses. * The application infrastructure does not guard against clients submitting (X-)Forwarded… headers.</p> https://cve.radiocsirt.org/vuln/ghsa-7m5c-fgwf-mwph https://cve.radiocsirt.org/vuln/gsd-2023-34036 gsd-2023-34036 https://cve.radiocsirt.org/vuln/gsd-2023-34036