https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 03:31:33 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-377931 EUVD-2026-377931 https://cve.radiocsirt.org/vuln/euvd-2026-377931 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6393 <p>A flaw was found in the Quarkus Cache Runtime. When request processing utilizes a Uni cached using @CacheResult and the cached Uni reuses the initial &#34;completion&#34; context, the processing switches to the cached Uni instead of the request context. This is a problem if the cached Uni context contains sensitive information, and could allow a malicious user to benefit from a POST request returning the response that is meant for another user, gaining access to sensitive data.</p> <p>A flaw was found in the Quarkus Cache Runtime. When request processing utilizes a Uni cached using @CacheResult and the cached Uni reuses the initial &#34;completion&#34; context, the processing switches to the cached Uni instead of the request context. This is a problem if the cached Uni context contains sensitive information, and could allow a malicious user to benefit from a POST request returning the response that is meant for another user, gaining access to sensitive data.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-6393 https://cve.radiocsirt.org/vuln/ghsa-xfv5-jqgp-vqhj <p><strong>Affected:</strong> Maven: io.quarkus:quarkus-cache</p> <p>A flaw was found in the Quarkus Cache Runtime. When request processing utilizes a Uni cached using @CacheResult and the cached Uni reuses the initial &#34;completion&#34; context, the processing switches to the cached Uni instead of the request context. This is a problem if the cached Uni context contains sensitive information, and could allow a malicious user to benefit from a POST request returning the response that is meant for another user, gaining access to sensitive data.</p> <p><strong>Affected:</strong> Maven: io.quarkus:quarkus-cache</p> <p>A flaw was found in the Quarkus Cache Runtime. When request processing utilizes a Uni cached using @CacheResult and the cached Uni reuses the initial &#34;completion&#34; context, the processing switches to the cached Uni instead of the request context. This is a problem if the cached Uni context contains sensitive information, and could allow a malicious user to benefit from a POST request returning the response that is meant for another user, gaining access to sensitive data.</p> https://cve.radiocsirt.org/vuln/ghsa-xfv5-jqgp-vqhj https://cve.radiocsirt.org/vuln/gsd-2023-6393 gsd-2023-6393 https://cve.radiocsirt.org/vuln/gsd-2023-6393 https://cve.radiocsirt.org/vuln/rhsa-2023:7700 <p>guava: insecure temporary directory creation quarkus: Potential invalid reuse of context when @CacheResult on a Uni is used quarkus: GraphQL operations over WebSockets bypass jose4j: Insecure iteration count setting snappy-java: Integer overflow in shuffle leads to DoS snappy-java: Integer overflow in compress leads to DoS snappy-java: Unchecked chunk length leads to DoS netty: SniHandler 16MB allocation leads to OOM apache-mina-sshd: information exposure in SFTP server implementations apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK snappy-java: Missing upper bound check on chunk length in snappy-java can lead to Denial of Service (DoS) impact</p> <p>guava: insecure temporary directory creation quarkus: Potential invalid reuse of context when @CacheResult on a Uni is used quarkus: GraphQL operations over WebSockets bypass jose4j: Insecure iteration count setting snappy-java: Integer overflow in shuffle leads to DoS snappy-java: Integer overflow in compress leads to DoS snappy-java: Unchecked chunk length leads to DoS netty: SniHandler 16MB allocation leads to OOM apache-mina-sshd: information exposure in SFTP server implementations apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK snappy-java: Missing upper bound check on chunk length in snappy-java can lead to Denial of Service (DoS) impact</p> https://cve.radiocsirt.org/vuln/rhsa-2023:7700