https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:22:00 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-08623 bdu:2024-08623 https://cve.radiocsirt.org/vuln/bdu:2024-08623 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0689 certfr-2024-avi-0689 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0689 https://cve.radiocsirt.org/vuln/cleanstart-2026-if26545 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: apache-hive</p> <p>Package apache-hive version 4.0.1-r1 fixes 27 vulnerabilities: CVE-2024-47561, CVE-2024-7254, CVE-2024-47554, CVE-2022-41881, CVE-2023-34462...</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: apache-hive</p> <p>Package apache-hive version 4.0.1-r1 fixes 27 vulnerabilities: CVE-2024-47561, CVE-2024-7254, CVE-2024-47554, CVE-2022-41881, CVE-2023-34462...</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-if26545 https://cve.radiocsirt.org/vuln/euvd-2026-198628 EUVD-2026-198628 https://cve.radiocsirt.org/vuln/euvd-2026-198628 https://cve.radiocsirt.org/vuln/fkie_cve-2024-38808 <p>In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) condition.</p> <p>Specifically, an application is vulnerable when the following is true:</p> <p>* The application evaluates user-supplied SpEL expressions.</p> <p>In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) condition.</p> <p>Specifically, an application is vulnerable when the following is true:</p> <p>* The application evaluates user-supplied SpEL expressions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-38808 https://cve.radiocsirt.org/vuln/ghsa-9cmq-m9j5-mvww <p><strong>Affected:</strong> Maven: org.springframework:spring-expression</p> <p>In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) condition. Older, unsupported versions are also affected.</p> <p>Specifically, an application is vulnerable when the following is true:</p> <p>* The application evaluates user-supplied SpEL expressions.</p> <p><strong>Affected:</strong> Maven: org.springframework:spring-expression</p> <p>In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) condition. Older, unsupported versions are also affected.</p> <p>Specifically, an application is vulnerable when the following is true:</p> <p>* The application evaluates user-supplied SpEL expressions.</p> https://cve.radiocsirt.org/vuln/ghsa-9cmq-m9j5-mvww https://cve.radiocsirt.org/vuln/rhsa-2024:6508 <p>undertow: response write hangs in case of Java 17 TLSv1.3 NewSessionTicket undertow: Improper State Management in Proxy Protocol parsing causes information leakage spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression</p> <p>undertow: response write hangs in case of Java 17 TLSv1.3 NewSessionTicket undertow: Improper State Management in Proxy Protocol parsing causes information leakage spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression</p> https://cve.radiocsirt.org/vuln/rhsa-2024:6508 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-38808 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libspring-java, Ubuntu:Pro:16.04:LTS: libspring-java, Ubuntu:Pro:18.04:LTS: libspring-java, Ubuntu:Pro:20.04:LTS: libspring-java, Ubuntu:Pro:22.04:LTS: libspring-java, Ubuntu:Pro:24.04:LTS: libspring-java, Ubuntu:25.10: libspring-java, Ubuntu:26.04:LTS: libspring-java</p> <p>In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) condition. Specifically, an application is vulnerable when the following is true: * The application evaluates user-supplied SpEL expressions.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libspring-java, Ubuntu:Pro:16.04:LTS: libspring-java, Ubuntu:Pro:18.04:LTS: libspring-java, Ubuntu:Pro:20.04:LTS: libspring-java, Ubuntu:Pro:22.04:LTS: libspring-java, Ubuntu:Pro:24.04:LTS: libspring-java, Ubuntu:25.10: libspring-java, Ubuntu:26.04:LTS: libspring-java</p> <p>In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) condition. Specifically, an application is vulnerable when the following is true: * The application evaluates user-supplied SpEL expressions.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-38808 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1853 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Framework ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Framework ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1853