https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:14:00 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1165 certfr-2026-avi-1165 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1165 https://cve.radiocsirt.org/vuln/cleanstart-2026-ah35927 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: wso2is</p> <p>Multiple security vulnerabilities affect the wso2is package. DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator. See references for individual vulnerability details.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: wso2is</p> <p>Multiple security vulnerabilities affect the wso2is package. DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-ah35927 https://cve.radiocsirt.org/vuln/euvd-2026-374434 EUVD-2026-374434 https://cve.radiocsirt.org/vuln/euvd-2026-374434 https://cve.radiocsirt.org/vuln/fkie_cve-2026-71290 <p>Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5.4 or newer. HostnameVerificationPolicy#BUILTIN setting has no effect when used with the async version of HttpClient. An attacker that can intercept and modify traffic between the client and the server can impersonate the server by presenting a valid certificate for a different domain.</p> <p>Please note the classic version of HttpClient is not affected by this vulnerability.</p> <p>Affected users are recommended to upgrade to at least version 5.6.4, which fixes the issue.</p> <p>Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5.4 or newer. HostnameVerificationPolicy#BUILTIN setting has no effect when used with the async version of HttpClient. An attacker that can intercept and modify traffic between the client and the server can impersonate the server by presenting a valid certificate for a different domain.</p> <p>Please note the classic version of HttpClient is not affected by this vulnerability.</p> <p>Affected users are recommended to upgrade to at least version 5.6.4, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-71290 https://cve.radiocsirt.org/vuln/ghsa-72q8-9rgw-5g6j <p>Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5.4 or newer. HostnameVerificationPolicy#BUILTIN setting has no effect when used with the async version of HttpClient. An attacker that can intercept and modify traffic between the client and the server can impersonate the server by presenting a valid certificate for a different domain.</p> <p>Please note the classic version of HttpClient is not affected by this vulnerability.</p> <p>Affected users are recommended to upgrade to at least version 5.6.4, which fixes the issue.</p> <p>Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5.4 or newer. HostnameVerificationPolicy#BUILTIN setting has no effect when used with the async version of HttpClient. An attacker that can intercept and modify traffic between the client and the server can impersonate the server by presenting a valid certificate for a different domain.</p> <p>Please note the classic version of HttpClient is not affected by this vulnerability.</p> <p>Affected users are recommended to upgrade to at least version 5.6.4, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-72q8-9rgw-5g6j https://cve.radiocsirt.org/vuln/ncsc-2026-0375 NCSC-2026-0375 https://cve.radiocsirt.org/vuln/ncsc-2026-0375 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-71290 <p><strong>Affected:</strong> Ubuntu:22.04:LTS: httpcomponents-core5, Ubuntu:24.04:LTS: httpcomponents-core5, Ubuntu:26.04:LTS: httpcomponents-core5</p> <p>Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5.4 or newer. HostnameVerificationPolicy#BUILTIN setting has no effect when used with the async version of HttpClient. An attacker that can intercept and modify traffic between the client and the server can impersonate the server by presenting a valid certificate for a different domain. Please note the classic version of HttpClient is not affected by this vulnerability. Affected users are recommended to upgrade to at least version 5.6.4, which fixes the issue.</p> <p><strong>Affected:</strong> Ubuntu:22.04:LTS: httpcomponents-core5, Ubuntu:24.04:LTS: httpcomponents-core5, Ubuntu:26.04:LTS: httpcomponents-core5</p> <p>Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5.4 or newer. HostnameVerificationPolicy#BUILTIN setting has no effect when used with the async version of HttpClient. An attacker that can intercept and modify traffic between the client and the server can impersonate the server by presenting a valid certificate for a different domain. Please note the classic version of HttpClient is not affected by this vulnerability. Affected users are recommended to upgrade to at least version 5.6.4, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-71290 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2782 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache HttpComponents ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Apache HttpComponents ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2782