<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 05 Oct 2026 22:55:01 +0000</lastBuildDate>
    <item>
      <title>certfr-2024-avi-0081 — De multiples vulnérabilités ont été découvertes dans &lt;span
class="textit"&gt;les produits Spring&lt;/span&gt;. Elles permettent…</title>
      <link>https://cve.radiocsirt.org/vuln/certfr-2024-avi-0081</link>
      <description>certfr-2024-avi-0081</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/certfr-2024-avi-0081</guid>
    </item>
    <item>
      <title>EUVD-2026-242873</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-242873</link>
      <description>EUVD-2026-242873</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-242873</guid>
    </item>
    <item>
      <title>fkie_cve-2024-22236</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2024-22236</link>
      <description>&lt;p&gt;In Spring Cloud Contract, versions 4.1.x prior to 4.1.1, versions 4.0.x prior to 4.0.5, and versions 3.1.x prior to 3.1.10, test execution is vulnerable to local information disclosure via temporary directory created with unsafe permissions through the shaded com.google.guava:guava dependency in the org.springframework.cloud:spring-cloud-contract-shade dependency.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;In Spring Cloud Contract, versions 4.1.x prior to 4.1.1, versions 4.0.x prior to 4.0.5, and versions 3.1.x prior to 3.1.10, test execution is vulnerable to local information disclosure via temporary directory created with unsafe permissions through the shaded com.google.guava:guava dependency in the org.springframework.cloud:spring-cloud-contract-shade dependency.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2024-22236</guid>
    </item>
    <item>
      <title>GHSA-p6rp-mx85-m459 — Spring Cloud Contract vulnerable to local information disclosure</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-p6rp-mx85-m459</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Maven: org.springframework.cloud:spring-cloud-contract-shade&lt;/p&gt;
&lt;p&gt;In Spring Cloud Contract, versions 4.1.x prior to 4.1.1, versions 4.0.x prior to 4.0.5, and versions 3.1.x prior to 3.1.10, test execution is vulnerable to local information disclosure via temporary directory created with unsafe permissions through the shaded com.google.guava:guava dependency in the org.springframework.cloud:spring-cloud-contract-shade dependency.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Maven: org.springframework.cloud:spring-cloud-contract-shade&lt;/p&gt;
&lt;p&gt;In Spring Cloud Contract, versions 4.1.x prior to 4.1.1, versions 4.0.x prior to 4.0.5, and versions 3.1.x prior to 3.1.10, test execution is vulnerable to local information disclosure via temporary directory created with unsafe permissions through the shaded com.google.guava:guava dependency in the org.springframework.cloud:spring-cloud-contract-shade dependency.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-p6rp-mx85-m459</guid>
    </item>
    <item>
      <title>gsd-2024-22236</title>
      <link>https://cve.radiocsirt.org/vuln/gsd-2024-22236</link>
      <description>gsd-2024-22236</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/gsd-2024-22236</guid>
    </item>
    <item>
      <title>WID-SEC-W-2024-0248 — VMware Tanzu Spring Cloud: Schwachstelle ermöglicht Offenlegung von Informationen</title>
      <link>https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0248</link>
      <description>&lt;p&gt;Ein lokaler Angreifer kann eine Schwachstelle in VMware Tanzu Spring Cloud ausnutzen, um Informationen offenzulegen.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Ein lokaler Angreifer kann eine Schwachstelle in VMware Tanzu Spring Cloud ausnutzen, um Informationen offenzulegen.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0248</guid>
    </item>
  </channel>
</rss>
