https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 02:10:36 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1032 certfr-2026-avi-1032 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1032 https://cve.radiocsirt.org/vuln/cleanstart-2026-ah35927 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: wso2is</p> <p>Multiple security vulnerabilities affect the wso2is package. DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: wso2is</p> <p>Multiple security vulnerabilities affect the wso2is package. DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-ah35927 https://cve.radiocsirt.org/vuln/euvd-2026-349180 EUVD-2026-349180 https://cve.radiocsirt.org/vuln/euvd-2026-349180 https://cve.radiocsirt.org/vuln/fkie_cve-2026-57819 <p>Apache CXF allows to set a limit on the number of form parameters in a JAX-RS message via the &#34;maxFormParameterCount&#34; configuration option. However, no default limit is set which may lead to denial of service attacks when processing  requests with very large numbers of form parameters. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue by using a default limit of 500 parameters.</p> <p>Apache CXF allows to set a limit on the number of form parameters in a JAX-RS message via the &#34;maxFormParameterCount&#34; configuration option. However, no default limit is set which may lead to denial of service attacks when processing  requests with very large numbers of form parameters. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue by using a default limit of 500 parameters.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-57819 https://cve.radiocsirt.org/vuln/ghsa-rqrh-ghmh-74j5 <p>Apache CXF allows to set a limit on the number of form parameters in a JAX-RS message via the &#34;maxFormParameterCount&#34; configuration option. However, no default limit is set which may lead to denial of service attacks when processing  requests with very large numbers of form parameters. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue by using a default limit of 500 parameters.</p> <p>Apache CXF allows to set a limit on the number of form parameters in a JAX-RS message via the &#34;maxFormParameterCount&#34; configuration option. However, no default limit is set which may lead to denial of service attacks when processing  requests with very large numbers of form parameters. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue by using a default limit of 500 parameters.</p> https://cve.radiocsirt.org/vuln/ghsa-rqrh-ghmh-74j5 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2682 <p>Ein Angreifer kann mehrere Schwachstellen in Apache CXF ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Apache CXF ausnutzen, um beliebigen Programmcode auszuführen, um seine Privilegien zu erhöhen, um einen Denial of Service Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2682