https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:27:46 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-03480 bdu:2026-03480 https://cve.radiocsirt.org/vuln/bdu:2026-03480 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0323 certfr-2026-avi-0323 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0323 https://cve.radiocsirt.org/vuln/cleanstart-2026-aq60759 <p><strong>Affected:</strong> CleanStart: apache-nifi</p> <p>Security vulnerability affects the apache-nifi package. When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written.</p> <p><strong>Affected:</strong> CleanStart: apache-nifi</p> <p>Security vulnerability affects the apache-nifi package. When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-aq60759 https://cve.radiocsirt.org/vuln/euvd-2026-278643 EUVD-2026-278643 https://cve.radiocsirt.org/vuln/euvd-2026-278643 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22732 <p>When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written.  This issue affects Spring Security Servlet applications using lazy (default) writing of HTTP Headers:</p> <p>: from 5.7.0 through 5.7.21, from 5.8.0 through 5.8.23, from 6.3.0 through 6.3.14, from 6.4.0 through 6.4.14, from 6.5.0 through 6.5.8, from 7.0.0 through 7.0.3.</p> <p>When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written.  This issue affects Spring Security Servlet applications using lazy (default) writing of HTTP Headers:</p> <p>: from 5.7.0 through 5.7.21, from 5.8.0 through 5.8.23, from 6.3.0 through 6.3.14, from 6.4.0 through 6.4.14, from 6.5.0 through 6.5.8, from 7.0.0 through 7.0.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-22732 https://cve.radiocsirt.org/vuln/ghsa-mf92-479x-3373 <p><strong>Affected:</strong> Maven: org.springframework.security:spring-security-web</p> <p>When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written.  This issue affects Spring Security: from 5.7.0 through 5.7.21, from 5.8.0 through 5.8.23, from 6.3.0 through 6.3.14, from 6.4.0 through 6.4.14, from 6.5.0 through 6.5.8, from 7.0.0 through 7.0.3.</p> <p><strong>Affected:</strong> Maven: org.springframework.security:spring-security-web</p> <p>When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written.  This issue affects Spring Security: from 5.7.0 through 5.7.21, from 5.8.0 through 5.8.23, from 6.3.0 through 6.3.14, from 6.4.0 through 6.4.14, from 6.5.0 through 6.5.8, from 7.0.0 through 7.0.3.</p> https://cve.radiocsirt.org/vuln/ghsa-mf92-479x-3373 https://cve.radiocsirt.org/vuln/ncsc-2026-0258 NCSC-2026-0258 https://cve.radiocsirt.org/vuln/ncsc-2026-0258 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0797 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in VMware Tanzu Spring Security ausnutzen, um Sicherheitsvorkehrungen zu umgehen und möglicherweise weitere Angriffe durchzuführen, beispielsweise zur Offenlegung vertraulicher Informationen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in VMware Tanzu Spring Security ausnutzen, um Sicherheitsvorkehrungen zu umgehen und möglicherweise weitere Angriffe durchzuführen, beispielsweise zur Offenlegung vertraulicher Informationen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0797