https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:39:10 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0991 certfr-2026-avi-0991 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0991 https://cve.radiocsirt.org/vuln/cleanstart-2026-ag15773 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: apache-hive</p> <p>Package apache-hive version 4.2.0-r4 fixes 2 vulnerabilities: CVE-2026-45205, CVE-2026-45300</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: apache-hive</p> <p>Package apache-hive version 4.2.0-r4 fixes 2 vulnerabilities: CVE-2026-45205, CVE-2026-45300</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-ag15773 https://cve.radiocsirt.org/vuln/cnvd-2026-21824 cnvd-2026-21824 https://cve.radiocsirt.org/vuln/cnvd-2026-21824 https://cve.radiocsirt.org/vuln/euvd-2026-318665 EUVD-2026-318665 https://cve.radiocsirt.org/vuln/euvd-2026-318665 https://cve.radiocsirt.org/vuln/fkie_cve-2026-45205 <p>Uncontrolled Recursion vulnerability in Apache Commons.</p> <p>When processing an untrusted configuration file, Commons Configuration will throw a StackOverflowError for YAML input with cycles. This issue affects Apache Commons: from 2.2 before 2.15.0.</p> <p>Users are recommended to upgrade to version 2.15.0, which fixes the issue.</p> <p>Uncontrolled Recursion vulnerability in Apache Commons.</p> <p>When processing an untrusted configuration file, Commons Configuration will throw a StackOverflowError for YAML input with cycles. This issue affects Apache Commons: from 2.2 before 2.15.0.</p> <p>Users are recommended to upgrade to version 2.15.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-45205 https://cve.radiocsirt.org/vuln/ghsa-337m-mw94-2v6g <p><strong>Affected:</strong> Maven: org.apache.commons:commons-configuration2</p> <p>Uncontrolled Recursion vulnerability in Apache Commons.</p> <p>When processing an untrusted configuration file, Commons Configuration will throw a StackOverflowError for YAML input with cycles. This issue affects Apache Commons: from 2.2 before 2.15.0.</p> <p>Users are recommended to upgrade to version 2.15.0, which fixes the issue.</p> <p><strong>Affected:</strong> Maven: org.apache.commons:commons-configuration2</p> <p>Uncontrolled Recursion vulnerability in Apache Commons.</p> <p>When processing an untrusted configuration file, Commons Configuration will throw a StackOverflowError for YAML input with cycles. This issue affects Apache Commons: from 2.2 before 2.15.0.</p> <p>Users are recommended to upgrade to version 2.15.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-337m-mw94-2v6g https://cve.radiocsirt.org/vuln/opensuse-su-2026:10784-1 <p>apache-commons-configuration2-2.15.0-1.1 on GA media</p> <p>apache-commons-configuration2-2.15.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2026:10784-1 https://cve.radiocsirt.org/vuln/rhsa-2026:54622 <p>eclipse-vertx/vert.x: eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name io.vertx/vertx-web: Eclipse Vert.x Web Client: Information disclosure via improper cookie domain validation org.apache.camel/camel-vertx-http: Apache Camel (camel-vertx-http): Remote Code Execution via Deserialization of Untrusted Data camel-jms: Apache Camel JMS components: Arbitrary Exchange state injection io.netty/netty-codec-stomp: Netty: Denial of Service vulnerability in STOMP decoder commons-configuration: Apache Commons Configuration: Denial of Service via uncontrolled recursion with crafted YAML input org.apache.camel/camel-mail: Apache Camel Mail Component: Credential exposure and information disclosure via improper input validation of mail headers org.apache.camel/camel-cxf: Apache Camel CXF SOAP: Remote attacker can execute unintended operations via header manipulation camel-vertx-websocket: Apache Camel Vertx Websocket: Server-Side Request Forgery and sensitive data exposure jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass jackson-databind: Jackson-databind: Security bypass allow…</p> <p>eclipse-vertx/vert.x: eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name io.vertx/vertx-web: Eclipse Vert.x Web Client: Information disclosure via improper cookie domain validation org.apache.camel/camel-vertx-http: Apache Camel (camel-vertx-http): Remote Code Execution via Deserialization of Untrusted Data camel-jms: Apache Camel JMS components: Arbitrary Exchange state injection io.netty/netty-codec-stomp: Netty: Denial of Service vulnerability in STOMP decoder commons-configuration: Apache Commons Configuration: Denial of Service via uncontrolled recursion with crafted YAML input org.apache.camel/camel-mail: Apache Camel Mail Component: Credential exposure and information disclosure via improper input validation of mail headers org.apache.camel/camel-cxf: Apache Camel CXF SOAP: Remote attacker can execute unintended operations via header manipulation camel-vertx-websocket: Apache Camel Vertx Websocket: Server-Side Request Forgery and sensitive data exposure jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass jackson-databind: Jackson-databind: Security bypass allow…</p> https://cve.radiocsirt.org/vuln/rhsa-2026:54622 https://cve.radiocsirt.org/vuln/suse-su-2026:21996-1 <p>Security update for apache-commons-lang3, apache-commons-text, apache-commons-configuration2, apache-commons-cli, apache-commons-io, apache-commons-codec</p> <p>Security update for apache-commons-lang3, apache-commons-text, apache-commons-configuration2, apache-commons-cli, apache-commons-io, apache-commons-codec</p> https://cve.radiocsirt.org/vuln/suse-su-2026:21996-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-45205 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: commons-configuration, Ubuntu:16.04:LTS: commons-configuration, Ubuntu:18.04:LTS: commons-configuration, Ubuntu:18.04:LTS: commons-configuration2, Ubuntu:20.04:LTS: commons-configuration, Ubuntu:20.04:LTS: commons-configuration2, Ubuntu:22.04:LTS: commons-configuration, Ubuntu:22.04:LTS: commons-configuration2, Ubuntu:24.04:LTS: commons-configuration, Ubuntu:24.04:LTS: commons-configuration2 and 4 more</p> <p>Uncontrolled Recursion vulnerability in Apache Commons. When processing an untrusted configuration file, Commons Configuration will throw a StackOverflowError for YAML input with cycles. This issue affects Apache Commons: from 2.2 before 2.15.0. Users are recommended to upgrade to version 2.15.0, which fixes the issue.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: commons-configuration, Ubuntu:16.04:LTS: commons-configuration, Ubuntu:18.04:LTS: commons-configuration, Ubuntu:18.04:LTS: commons-configuration2, Ubuntu:20.04:LTS: commons-configuration, Ubuntu:20.04:LTS: commons-configuration2, Ubuntu:22.04:LTS: commons-configuration, Ubuntu:22.04:LTS: commons-configuration2, Ubuntu:24.04:LTS: commons-configuration, Ubuntu:24.04:LTS: commons-configuration2 and 4 more</p> <p>Uncontrolled Recursion vulnerability in Apache Commons. When processing an untrusted configuration file, Commons Configuration will throw a StackOverflowError for YAML input with cycles. This issue affects Apache Commons: from 2.2 before 2.15.0. Users are recommended to upgrade to version 2.15.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-45205 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1539 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Commons ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache Commons ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1539