Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:56:13 +0000 certfr-2026-avi-0744 — De multiples vulnérabilités ont été découvertes dans les produits Spring. Elles permettent à un attaquant de provoquer… https://cve.radiocsirt.org/vuln/certfr-2026-avi-0744 certfr-2026-avi-0744 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0744 EUVD-2026-327400 https://cve.radiocsirt.org/vuln/euvd-2026-327400 EUVD-2026-327400 https://cve.radiocsirt.org/vuln/euvd-2026-327400 fkie_cve-2026-41708 https://cve.radiocsirt.org/vuln/fkie_cve-2026-41708 <p>In Spring Cloud Sleuth, it is possible for a user to provide specially crafted calls that may cause a denial-of-service (DoS) condition. The application is vulnerable when it uses a vulnerable version of org.springframework.cloud:spring-cloud-sleuth-instrumentation and Spring TX instrumentation is not disabled.</p> <p>Affected versions: Spring Cloud Sleuth 3.1.0 through 3.1.13.</p> <p>In Spring Cloud Sleuth, it is possible for a user to provide specially crafted calls that may cause a denial-of-service (DoS) condition. The application is vulnerable when it uses a vulnerable version of org.springframework.cloud:spring-cloud-sleuth-instrumentation and Spring TX instrumentation is not disabled.</p> <p>Affected versions: Spring Cloud Sleuth 3.1.0 through 3.1.13.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-41708 GHSA-26m2-9g2q-v45q — Spring Cloud Sleuth instrumentation of Spring TX DoS vulnerability https://cve.radiocsirt.org/vuln/ghsa-26m2-9g2q-v45q <p><strong>Affected:</strong> Maven: org.springframework.cloud:spring-cloud-sleuth-instrumentation</p> <p>In Spring Cloud Sleuth, it is possible for a user to provide specially crafted calls that may cause a denial-of-service (DoS) condition. The application is vulnerable when it uses a vulnerable version of org.springframework.cloud:spring-cloud-sleuth-instrumentation and Spring TX instrumentation is not disabled.</p> <p>Affected versions: Spring Cloud Sleuth 3.1.0 through 3.1.13.</p> <p><strong>Affected:</strong> Maven: org.springframework.cloud:spring-cloud-sleuth-instrumentation</p> <p>In Spring Cloud Sleuth, it is possible for a user to provide specially crafted calls that may cause a denial-of-service (DoS) condition. The application is vulnerable when it uses a vulnerable version of org.springframework.cloud:spring-cloud-sleuth-instrumentation and Spring TX instrumentation is not disabled.</p> <p>Affected versions: Spring Cloud Sleuth 3.1.0 through 3.1.13.</p> https://cve.radiocsirt.org/vuln/ghsa-26m2-9g2q-v45q WID-SEC-W-2026-1901 — VMware Tanzu Spring Cloud Gateway Server und Sleuth: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1901 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Cloud Gateway Server und Sleuth ausnutzen, um einen Denial of Service Angriff durchzuführen oder um Daten zu manipulieren.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Cloud Gateway Server und Sleuth ausnutzen, um einen Denial of Service Angriff durchzuführen oder um Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1901