https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 14:15:09 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-01020 bdu:2026-01020 https://cve.radiocsirt.org/vuln/bdu:2026-01020 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0224 certfr-2026-avi-0224 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0224 https://cve.radiocsirt.org/vuln/cleanstart-2026-at07752 <p><strong>Affected:</strong> CleanStart: apache-nifi, CleanStart: confluent-common-docker, CleanStart: strimzi-kafka-operator</p> <p>CVE-2024-29371 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: apache-nifi, CleanStart: confluent-common-docker, CleanStart: strimzi-kafka-operator</p> <p>CVE-2024-29371 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-at07752 https://cve.radiocsirt.org/vuln/euvd-2026-266472 EUVD-2026-266472 https://cve.radiocsirt.org/vuln/euvd-2026-266472 https://cve.radiocsirt.org/vuln/fkie_cve-2024-29371 <p>In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ratio. When this token is processed by the server, it results in significant memory allocation and processing time during decompression.</p> <p>In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ratio. When this token is processed by the server, it results in significant memory allocation and processing time during decompression.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-29371 https://cve.radiocsirt.org/vuln/ghsa-3677-xxcr-wjqv <p><strong>Affected:</strong> Maven: org.bitbucket.b_c:jose4j</p> <p>In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ratio. When this token is processed by the server, it results in significant memory allocation and processing time during decompression.</p> <p><strong>Affected:</strong> Maven: org.bitbucket.b_c:jose4j</p> <p>In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ratio. When this token is processed by the server, it results in significant memory allocation and processing time during decompression.</p> https://cve.radiocsirt.org/vuln/ghsa-3677-xxcr-wjqv https://cve.radiocsirt.org/vuln/gsd-2024-29371 gsd-2024-29371 https://cve.radiocsirt.org/vuln/gsd-2024-29371 https://cve.radiocsirt.org/vuln/rhsa-2024:5479 <p>cxf-core: Apache CXF SSRF Vulnerability using the Aegis databinding netty-codec-http: Allocation of Resources Without Limits or Throttling jose4j: jose4j: Denial of Service via malicious JSON Web Encryption (JWE) token compression org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service bc-java: BouncyCastle vulnerable to a timing variant of Bleichenbacher (Marvin Attack) org.bouncycastle:bcprov-jdk18on: Infinite loop in ED25519 verification in the ScalarUtil class</p> <p>cxf-core: Apache CXF SSRF Vulnerability using the Aegis databinding netty-codec-http: Allocation of Resources Without Limits or Throttling jose4j: jose4j: Denial of Service via malicious JSON Web Encryption (JWE) token compression org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service bc-java: BouncyCastle vulnerable to a timing variant of Bleichenbacher (Marvin Attack) org.bouncycastle:bcprov-jdk18on: Infinite loop in ED25519 verification in the ScalarUtil class</p> https://cve.radiocsirt.org/vuln/rhsa-2024:5479 https://cve.radiocsirt.org/vuln/suse-su-2026:1010-1 <p>Security update 5.0.7 for Multi-Linux Manager Server</p> <p>Security update 5.0.7 for Multi-Linux Manager Server</p> https://cve.radiocsirt.org/vuln/suse-su-2026:1010-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-29371 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: libjose4j-java, Ubuntu:24.04:LTS: libjose4j-java, Ubuntu:25.10: libjose4j-java, Ubuntu:26.04:LTS: libjose4j-java</p> <p>In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ratio. When this token is processed by the server, it results in significant memory allocation and processing time during decompression.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: libjose4j-java, Ubuntu:24.04:LTS: libjose4j-java, Ubuntu:25.10: libjose4j-java, Ubuntu:26.04:LTS: libjose4j-java</p> <p>In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ratio. When this token is processed by the server, it results in significant memory allocation and processing time during decompression.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-29371 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0517 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM WebSphere Application Server und WebSphere Application Server Liberty ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM WebSphere Application Server und WebSphere Application Server Liberty ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0517