https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 08:36:37 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-00651 bdu:2024-00651 https://cve.radiocsirt.org/vuln/bdu:2024-00651 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0980 certfr-2023-avi-0980 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0980 https://cve.radiocsirt.org/vuln/euvd-2026-216531 EUVD-2026-216531 https://cve.radiocsirt.org/vuln/euvd-2026-216531 https://cve.radiocsirt.org/vuln/fkie_cve-2023-34053 <p>In Spring Framework versions 6.0.0 - 6.0.13, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition.</p> <p>Specifically, an application is vulnerable when all of the following are true:</p> <p>* the application uses Spring MVC or Spring WebFlux * io.micrometer:micrometer-core is on the classpath * an ObservationRegistry is configured in the application to record observations</p> <p>Typically, Spring Boot applications need the org.springframework.boot:spring-boot-actuator dependency to meet all conditions.</p> <p>In Spring Framework versions 6.0.0 - 6.0.13, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition.</p> <p>Specifically, an application is vulnerable when all of the following are true:</p> <p>* the application uses Spring MVC or Spring WebFlux * io.micrometer:micrometer-core is on the classpath * an ObservationRegistry is configured in the application to record observations</p> <p>Typically, Spring Boot applications need the org.springframework.boot:spring-boot-actuator dependency to meet all conditions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-34053 https://cve.radiocsirt.org/vuln/ghsa-v94h-hvhg-mf9h <p><strong>Affected:</strong> Maven: org.springframework:spring-webmvc</p> <p>In Spring Framework versions 6.0.0 - 6.0.13, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition.</p> <p>Specifically, an application is vulnerable when all of the following are true:</p> <p>* the application uses Spring MVC or Spring WebFlux * io.micrometer:micrometer-core is on the classpath * an ObservationRegistry is configured in the application to record observations</p> <p>Typically, Spring Boot applications need the org.springframework.boot:spring-boot-actuator dependency to meet all conditions.</p> <p><strong>Affected:</strong> Maven: org.springframework:spring-webmvc</p> <p>In Spring Framework versions 6.0.0 - 6.0.13, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition.</p> <p>Specifically, an application is vulnerable when all of the following are true:</p> <p>* the application uses Spring MVC or Spring WebFlux * io.micrometer:micrometer-core is on the classpath * an ObservationRegistry is configured in the application to record observations</p> <p>Typically, Spring Boot applications need the org.springframework.boot:spring-boot-actuator dependency to meet all conditions.</p> https://cve.radiocsirt.org/vuln/ghsa-v94h-hvhg-mf9h https://cve.radiocsirt.org/vuln/gsd-2023-34053 gsd-2023-34053 https://cve.radiocsirt.org/vuln/gsd-2023-34053 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-34053 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libspring-java, Ubuntu:Pro:16.04:LTS: libspring-java, Ubuntu:Pro:18.04:LTS: libspring-java, Ubuntu:Pro:20.04:LTS: libspring-java, Ubuntu:Pro:22.04:LTS: libspring-java, Ubuntu:Pro:24.04:LTS: libspring-java, Ubuntu:25.10: libspring-java, Ubuntu:26.04:LTS: libspring-java</p> <p>In Spring Framework versions 6.0.0 - 6.0.13, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition. Specifically, an application is vulnerable when all of the following are true: * the application uses Spring MVC or Spring WebFlux * io.micrometer:micrometer-core is on the classpath * an ObservationRegistry is configured in the application to record observations Typically, Spring Boot applications need the org.springframework.boot:spring-boot-actuator dependency to meet all conditions.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libspring-java, Ubuntu:Pro:16.04:LTS: libspring-java, Ubuntu:Pro:18.04:LTS: libspring-java, Ubuntu:Pro:20.04:LTS: libspring-java, Ubuntu:Pro:22.04:LTS: libspring-java, Ubuntu:Pro:24.04:LTS: libspring-java, Ubuntu:25.10: libspring-java, Ubuntu:26.04:LTS: libspring-java</p> <p>In Spring Framework versions 6.0.0 - 6.0.13, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition. Specifically, an application is vulnerable when all of the following are true: * the application uses Spring MVC or Spring WebFlux * io.micrometer:micrometer-core is on the classpath * an ObservationRegistry is configured in the application to record observations Typically, Spring Boot applications need the org.springframework.boot:spring-boot-actuator dependency to meet all conditions.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-34053 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3009 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Framework und VMware Tanzu Spring Boot ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Framework und VMware Tanzu Spring Boot ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3009