https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:09:20 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0792 certfr-2025-avi-0792 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0792 https://cve.radiocsirt.org/vuln/cleanstart-2026-ft93686 <p><strong>Affected:</strong> CleanStart: activemq, CleanStart: apache-hive</p> <p>CVE-2025-41249 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: activemq, CleanStart: apache-hive</p> <p>CVE-2025-41249 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-ft93686 https://cve.radiocsirt.org/vuln/euvd-2026-252828 EUVD-2026-252828 https://cve.radiocsirt.org/vuln/euvd-2026-252828 https://cve.radiocsirt.org/vuln/fkie_cve-2025-41249 <p>The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions.</p> <p>Your application may be affected by this if you are using Spring Security&#39;s @EnableMethodSecurity feature.</p> <p>You are not affected by this if you are not using @EnableMethodSecurity or if you do not use security annotations on methods in generic superclasses or generic interfaces.</p> <p>This CVE is published in conjunction with CVE-2025-41248 https://spring.io/security/cve-2025-41248 .</p> <p>The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions.</p> <p>Your application may be affected by this if you are using Spring Security&#39;s @EnableMethodSecurity feature.</p> <p>You are not affected by this if you are not using @EnableMethodSecurity or if you do not use security annotations on methods in generic superclasses or generic interfaces.</p> <p>This CVE is published in conjunction with CVE-2025-41248 https://spring.io/security/cve-2025-41248 .</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-41249 https://cve.radiocsirt.org/vuln/ghsa-jmp9-x22r-554x <p><strong>Affected:</strong> Maven: org.springframework:spring-core</p> <p>The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions.</p> <p>Your application may be affected by this if you are using Spring Security&#39;s @EnableMethodSecurity feature.</p> <p>You are not affected by this if you are not using @EnableMethodSecurity or if you do not use security annotations on methods in generic superclasses or generic interfaces.</p> <p>This CVE is published in conjunction with CVE-2025-41248 https://spring.io/security/cve-2025-41248 .</p> <p><strong>Affected:</strong> Maven: org.springframework:spring-core</p> <p>The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions.</p> <p>Your application may be affected by this if you are using Spring Security&#39;s @EnableMethodSecurity feature.</p> <p>You are not affected by this if you are not using @EnableMethodSecurity or if you do not use security annotations on methods in generic superclasses or generic interfaces.</p> <p>This CVE is published in conjunction with CVE-2025-41248 https://spring.io/security/cve-2025-41248 .</p> https://cve.radiocsirt.org/vuln/ghsa-jmp9-x22r-554x https://cve.radiocsirt.org/vuln/jvndb-2026-010299 <p>Multiple vulnerabilities exist in Hitachi Ops Center Common Services. CVE-2024-4028, CVE-2025-8714, CVE-2025-8715, CVE-2025-10044, CVE-2025-12817, CVE-2025-12818, CVE-2025-41248, CVE-2025-41249 (*)CVE-2026-1190 is removed from the list.</p> <p>Multiple vulnerabilities exist in Hitachi Ops Center Common Services. CVE-2024-4028, CVE-2025-8714, CVE-2025-8715, CVE-2025-10044, CVE-2025-12817, CVE-2025-12818, CVE-2025-41248, CVE-2025-41249 (*)CVE-2026-1190 is removed from the list.</p> https://cve.radiocsirt.org/vuln/jvndb-2026-010299 https://cve.radiocsirt.org/vuln/ncsc-2026-0020 NCSC-2026-0020 https://cve.radiocsirt.org/vuln/ncsc-2026-0020 https://cve.radiocsirt.org/vuln/rhsa-2025:18028 <p>org.eclipse.jgit: XXE vulnerability in Eclipse JGit org.springframework.security/spring-security-core: Spring Security authorization bypass org.springframework/spring-core: Spring Framework Annotation Detection Vulnerability netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions io.minio/minio: minio-java Client XML Tag is Vulnerable to Value Substitution</p> <p>org.eclipse.jgit: XXE vulnerability in Eclipse JGit org.springframework.security/spring-security-core: Spring Security authorization bypass org.springframework/spring-core: Spring Framework Annotation Detection Vulnerability netty-codec-http: Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions io.minio/minio: minio-java Client XML Tag is Vulnerable to Value Substitution</p> https://cve.radiocsirt.org/vuln/rhsa-2025:18028 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-41249 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libspring-java, Ubuntu:Pro:16.04:LTS: libspring-java, Ubuntu:Pro:18.04:LTS: libspring-java, Ubuntu:Pro:20.04:LTS: libspring-java, Ubuntu:Pro:22.04:LTS: libspring-java, Ubuntu:Pro:24.04:LTS: libspring-java, Ubuntu:25.10: libspring-java, Ubuntu:26.04:LTS: libspring-java</p> <p>The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions. Your application may be affected by this if you are using Spring Security&#39;s @EnableMethodSecurity feature. You are not affected by this if you are not using @EnableMethodSecurity or if you do not use security annotations on methods in generic superclasses or generic interfaces. This CVE is published in conjunction with CVE-2025-41248 https://spring.io/security/cve-2025-41248 .</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libspring-java, Ubuntu:Pro:16.04:LTS: libspring-java, Ubuntu:Pro:18.04:LTS: libspring-java, Ubuntu:Pro:20.04:LTS: libspring-java, Ubuntu:Pro:22.04:LTS: libspring-java, Ubuntu:Pro:24.04:LTS: libspring-java, Ubuntu:25.10: libspring-java, Ubuntu:26.04:LTS: libspring-java</p> <p>The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions. Your application may be affected by this if you are using Spring Security&#39;s @EnableMethodSecurity feature. You are not affected by this if you are not using @EnableMethodSecurity or if you do not use security annotations on methods in generic superclasses or generic interfaces. This CVE is published in conjunction with CVE-2025-41248 https://spring.io/security/cve-2025-41248 .</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-41249 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2060 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Security und VMware Tanzu Spring Framework ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Security und VMware Tanzu Spring Framework ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2060