https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:55:23 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-10863 bdu:2026-10863 https://cve.radiocsirt.org/vuln/bdu:2026-10863 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0756 certfr-2025-avi-0756 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0756 https://cve.radiocsirt.org/vuln/cleanstart-2026-gu43525 <p><strong>Affected:</strong> CleanStart: sonarqube</p> <p>Security vulnerability affects the sonarqube package. In Jakarta Mail versions prior to 2.</p> <p><strong>Affected:</strong> CleanStart: sonarqube</p> <p>Security vulnerability affects the sonarqube package. In Jakarta Mail versions prior to 2.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-gu43525 https://cve.radiocsirt.org/vuln/euvd-2026-329167 EUVD-2026-329167 https://cve.radiocsirt.org/vuln/euvd-2026-329167 https://cve.radiocsirt.org/vuln/fkie_cve-2025-7962 <p>In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages.</p> <p>In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-7962 https://cve.radiocsirt.org/vuln/ghsa-9342-92gg-6v29 <p><strong>Affected:</strong> Maven: org.eclipse.angus:smtp, Maven: com.sun.mail:jakarta.mail</p> <p>In Jakarta Mail 2.2 it is possible to preform a SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages.</p> <p><strong>Affected:</strong> Maven: org.eclipse.angus:smtp, Maven: com.sun.mail:jakarta.mail</p> <p>In Jakarta Mail 2.2 it is possible to preform a SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages.</p> https://cve.radiocsirt.org/vuln/ghsa-9342-92gg-6v29 https://cve.radiocsirt.org/vuln/oesa-2025-1987 <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: jakarta-mail</p> <p>The Jakarta Mail API provides a platform-independent and protocol-independent framework to build mail and messaging applications. Security Fix(es):</p> <p>A vulnerability has been found in Eclipse Jakarta Mail 2.2 and classified as problematic.The CWE definition for the vulnerability is CWE-147. The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as input terminators when they are sent to a downstream component.As an impact it is known to affect confidentiality, integrity, and availability.There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2025-7962)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS-SP1: jakarta-mail</p> <p>The Jakarta Mail API provides a platform-independent and protocol-independent framework to build mail and messaging applications. Security Fix(es):</p> <p>A vulnerability has been found in Eclipse Jakarta Mail 2.2 and classified as problematic.The CWE definition for the vulnerability is CWE-147. The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as input terminators when they are sent to a downstream component.As an impact it is known to affect confidentiality, integrity, and availability.There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2025-7962)</p> https://cve.radiocsirt.org/vuln/oesa-2025-1987 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15378-1 <p>javamail-1.6.2-3.1 on GA media</p> <p>javamail-1.6.2-3.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15378-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-7962 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: jakarta-mail, Ubuntu:24.04:LTS: jakarta-mail, Ubuntu:25.10: jakarta-mail, Ubuntu:26.04:LTS: jakarta-mail</p> <p>In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: jakarta-mail, Ubuntu:24.04:LTS: jakarta-mail, Ubuntu:25.10: jakarta-mail, Ubuntu:26.04:LTS: jakarta-mail</p> <p>In Jakarta Mail versions prior to 2.0.2 it is possible to perform an SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-7962 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1870 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Keycloak ausnutzen, um beliebige E-Mails zu senden.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Keycloak ausnutzen, um beliebige E-Mails zu senden.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1870