https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:20:20 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-01707 bdu:2026-01707 https://cve.radiocsirt.org/vuln/bdu:2026-01707 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0316 certfr-2025-avi-0316 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0316 https://cve.radiocsirt.org/vuln/cleanstart-2026-be42282 <p><strong>Affected:</strong> CleanStart: apicurio-registry</p> <p>Security vulnerability affects the apicurio-registry package. This issue is resolved in later releases. See references for vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: apicurio-registry</p> <p>Security vulnerability affects the apicurio-registry package. This issue is resolved in later releases. See references for vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-be42282 https://cve.radiocsirt.org/vuln/euvd-2026-213953 EUVD-2026-213953 https://cve.radiocsirt.org/vuln/euvd-2026-213953 https://cve.radiocsirt.org/vuln/fkie_cve-2024-57699 <p>A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. When loading a specially crafted JSON input, containing a large number of ’{’, a stack exhaustion can be trigger, which could allow an attacker to cause a Denial of Service (DoS). This issue exists because of an incomplete fix for CVE-2023-1370.</p> <p>A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. When loading a specially crafted JSON input, containing a large number of ’{’, a stack exhaustion can be trigger, which could allow an attacker to cause a Denial of Service (DoS). This issue exists because of an incomplete fix for CVE-2023-1370.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-57699 https://cve.radiocsirt.org/vuln/ghsa-pq2g-wx69-c263 <p><strong>Affected:</strong> Maven: net.minidev:json-smart</p> <p>A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. When loading a specially crafted JSON input, containing a large number of ’{’, a stack exhaustion can be trigger, which could allow an attacker to cause a Denial of Service (DoS). This issue exists because of an incomplete fix for CVE-2023-1370.</p> <p>The fixed version only addresses the default modes provided by [JSONParser](https://github.com/netplex/json-smart-v2/blob/master/json-smart/src/main/java/net/minidev/json/parser/JSONParser.java#L118), such as `MODE_RFC4627`. If you create the JSONParser manually or with custom options, make sure to set the `LIMIT_JSON_DEPTH` option.</p> <p><strong>Affected:</strong> Maven: net.minidev:json-smart</p> <p>A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. When loading a specially crafted JSON input, containing a large number of ’{’, a stack exhaustion can be trigger, which could allow an attacker to cause a Denial of Service (DoS). This issue exists because of an incomplete fix for CVE-2023-1370.</p> <p>The fixed version only addresses the default modes provided by [JSONParser](https://github.com/netplex/json-smart-v2/blob/master/json-smart/src/main/java/net/minidev/json/parser/JSONParser.java#L118), such as `MODE_RFC4627`. If you create the JSONParser manually or with custom options, make sure to set the `LIMIT_JSON_DEPTH` option.</p> https://cve.radiocsirt.org/vuln/ghsa-pq2g-wx69-c263 https://cve.radiocsirt.org/vuln/ncsc-2026-0028 NCSC-2026-0028 https://cve.radiocsirt.org/vuln/ncsc-2026-0028 https://cve.radiocsirt.org/vuln/oesa-2025-1164 <p><strong>Affected:</strong> openEuler:24.03-LTS: json-smart, openEuler:24.03-LTS-SP1: json-smart, openEuler:20.03-LTS-SP4: json-smart, openEuler:22.03-LTS-SP3: json-smart, openEuler:22.03-LTS-SP4: json-smart</p> <p>Json-smart is a performance focused, JSON processor lib. Security Fix(es):</p> <p>A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. When loading a specially crafted JSON input, containing a large number of ’{’, a stack exhaustion can be trigger, which could allow an attacker to cause a Denial of Service (DoS). This issue exists because of an incomplete fix for CVE-2023-1370.(CVE-2024-57699)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: json-smart, openEuler:24.03-LTS-SP1: json-smart, openEuler:20.03-LTS-SP4: json-smart, openEuler:22.03-LTS-SP3: json-smart, openEuler:22.03-LTS-SP4: json-smart</p> <p>Json-smart is a performance focused, JSON processor lib. Security Fix(es):</p> <p>A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. When loading a specially crafted JSON input, containing a large number of ’{’, a stack exhaustion can be trigger, which could allow an attacker to cause a Denial of Service (DoS). This issue exists because of an incomplete fix for CVE-2023-1370.(CVE-2024-57699)</p> https://cve.radiocsirt.org/vuln/oesa-2025-1164 https://cve.radiocsirt.org/vuln/rhsa-2025:10092 <p>json-smart: Potential DoS via stack exhaustion (incomplete fix for CVE-2023-1370) jetty-http2-common: Jetty HTTP/2 Header List Size Vulnerability spring-security-core: Spring Security BCryptPasswordEncoder does not enforce maximum password length com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError</p> <p>json-smart: Potential DoS via stack exhaustion (incomplete fix for CVE-2023-1370) jetty-http2-common: Jetty HTTP/2 Header List Size Vulnerability spring-security-core: Spring Security BCryptPasswordEncoder does not enforce maximum password length com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError</p> https://cve.radiocsirt.org/vuln/rhsa-2025:10092 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-57699 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: json-smart, Ubuntu:20.04:LTS: json-smart, Ubuntu:22.04:LTS: json-smart, Ubuntu:24.04:LTS: json-smart, Ubuntu:25.10: json-smart, Ubuntu:26.04:LTS: json-smart</p> <p>A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. When loading a specially crafted JSON input, containing a large number of ’{’, a stack exhaustion can be trigger, which could allow an attacker to cause a Denial of Service (DoS). This issue exists because of an incomplete fix for CVE-2023-1370.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: json-smart, Ubuntu:20.04:LTS: json-smart, Ubuntu:22.04:LTS: json-smart, Ubuntu:24.04:LTS: json-smart, Ubuntu:25.10: json-smart, Ubuntu:26.04:LTS: json-smart</p> <p>A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. When loading a specially crafted JSON input, containing a large number of ’{’, a stack exhaustion can be trigger, which could allow an attacker to cause a Denial of Service (DoS). This issue exists because of an incomplete fix for CVE-2023-1370.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-57699 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0801 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Atlassian Bamboo ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Atlassian Bamboo ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0801