https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:49:58 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-10527 EUVD-2026-10527 https://cve.radiocsirt.org/vuln/euvd-2026-10527 https://cve.radiocsirt.org/vuln/fkie_cve-2023-51079 <p>A long execution time can occur in the ParseTools.subCompileExpression method in MVEL 2.5.0.Final because of many Java class lookups. NOTE: the vendor disputes this because &#34;the only thing that you could expect is that the parser will take a crazy amount of time to complete its task.&#34;</p> <p>A long execution time can occur in the ParseTools.subCompileExpression method in MVEL 2.5.0.Final because of many Java class lookups. NOTE: the vendor disputes this because &#34;the only thing that you could expect is that the parser will take a crazy amount of time to complete its task.&#34;</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-51079 https://cve.radiocsirt.org/vuln/ghsa-h63j-xqx6-w58r <p><strong>Affected:</strong> Maven: org.mvel:mvel2</p> <p>A TimeOut error exists in the ParseTools.subCompileExpression method in mvel2 v2.5.0 Final.</p> <p><strong>Affected:</strong> Maven: org.mvel:mvel2</p> <p>A TimeOut error exists in the ParseTools.subCompileExpression method in mvel2 v2.5.0 Final.</p> https://cve.radiocsirt.org/vuln/ghsa-h63j-xqx6-w58r https://cve.radiocsirt.org/vuln/gsd-2023-51079 gsd-2023-51079 https://cve.radiocsirt.org/vuln/gsd-2023-51079 https://cve.radiocsirt.org/vuln/rhsa-2024:4884 <p>mvel: TimeOut error when calling ParseTools.subCompileExpression() function io.vertx/vertx-core: memory leak due to the use of Netty FastThreadLocal data structures in Vertx io.vertx:vertx-core: memory leak when a TCP server is configured with TLS and SNI support pgjdbc: PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE undertow: Out-of-memory Error after several closed connections with wildfly-http-client protocol undertow: response write hangs in case of Java 17 TLSv1.3 NewSessionTicket undertow: url-encoded request path information can be broken on ajp-listener jetty: stop accepting new connections from valid clients spring-security: Broken Access Control in Spring Security With Direct Use of isFullyAuthenticated spring-security: Broken Access Control With Direct Use of AuthenticatedVoter threetenbp: null pointer exception netty-codec-http: Allocation of Resources Without Limits or Throttling org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service bc-java: BouncyCastle vulnerable to a timing variant of Bleichenbacher (Marvin Attack) org.bouncycastle:bcprov-jdk18on: Infinite loop in ED25519 verification in the ScalarUtil class org.bouncycastle: Use of Incorrectly-Resolved Name or Reference</p> <p>mvel: TimeOut error when calling ParseTools.subCompileExpression() function io.vertx/vertx-core: memory leak due to the use of Netty FastThreadLocal data structures in Vertx io.vertx:vertx-core: memory leak when a TCP server is configured with TLS and SNI support pgjdbc: PostgreSQL JDBC Driver allows attacker to inject SQL if using PreferQueryMode=SIMPLE undertow: Out-of-memory Error after several closed connections with wildfly-http-client protocol undertow: response write hangs in case of Java 17 TLSv1.3 NewSessionTicket undertow: url-encoded request path information can be broken on ajp-listener jetty: stop accepting new connections from valid clients spring-security: Broken Access Control in Spring Security With Direct Use of isFullyAuthenticated spring-security: Broken Access Control With Direct Use of AuthenticatedVoter threetenbp: null pointer exception netty-codec-http: Allocation of Resources Without Limits or Throttling org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service bc-java: BouncyCastle vulnerable to a timing variant of Bleichenbacher (Marvin Attack) org.bouncycastle:bcprov-jdk18on: Infinite loop in ED25519 verification in the ScalarUtil class org.bouncycastle: Use of Incorrectly-Resolved Name or Reference</p> https://cve.radiocsirt.org/vuln/rhsa-2024:4884