https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 03:12:36 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1256 certfr-2026-avi-1256 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1256 https://cve.radiocsirt.org/vuln/euvd-2026-354292 EUVD-2026-354292 https://cve.radiocsirt.org/vuln/euvd-2026-354292 https://cve.radiocsirt.org/vuln/fkie_cve-2026-73635 <p>Allocation of resources without limits or throttling vulnerability in Apache Struts. When no fixed locale is configured, the locale used for localized-text lookups is taken from the incoming request, allowing an unauthenticated remote client to cause the framework&#39;s internal localized-text caches to grow without bound and exhaust the Java heap, denying service to other users. Applications that configure a fixed locale are not affected.</p> <p>This issue affects Apache Struts: from 2.0.0 through 2.3.37, from 2.5.0 through 2.5.33, from 6.0.0 through 6.10.0, from 7.0.0 through 7.2.1.</p> <p>Users are recommended to upgrade to version 6.11.0 or 7.3.0, which fixes the issue.</p> <p>Allocation of resources without limits or throttling vulnerability in Apache Struts. When no fixed locale is configured, the locale used for localized-text lookups is taken from the incoming request, allowing an unauthenticated remote client to cause the framework&#39;s internal localized-text caches to grow without bound and exhaust the Java heap, denying service to other users. Applications that configure a fixed locale are not affected.</p> <p>This issue affects Apache Struts: from 2.0.0 through 2.3.37, from 2.5.0 through 2.5.33, from 6.0.0 through 6.10.0, from 7.0.0 through 7.2.1.</p> <p>Users are recommended to upgrade to version 6.11.0 or 7.3.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-73635 https://cve.radiocsirt.org/vuln/ghsa-prrh-5r25-ch75 <p>Allocation of resources without limits or throttling vulnerability in Apache Struts. When no fixed locale is configured, the locale used for localized-text lookups is taken from the incoming request, allowing an unauthenticated remote client to cause the framework&#39;s internal localized-text caches to grow without bound and exhaust the Java heap, denying service to other users. Applications that configure a fixed locale are not affected.</p> <p>This issue affects Apache Struts: from 2.0.0 through 2.3.37, from 2.5.0 through 2.5.33, from 6.0.0 through 6.10.0, from 7.0.0 through 7.2.1.</p> <p>Users are recommended to upgrade to version 6.11.0 or 7.3.0, which fixes the issue.</p> <p>Allocation of resources without limits or throttling vulnerability in Apache Struts. When no fixed locale is configured, the locale used for localized-text lookups is taken from the incoming request, allowing an unauthenticated remote client to cause the framework&#39;s internal localized-text caches to grow without bound and exhaust the Java heap, denying service to other users. Applications that configure a fixed locale are not affected.</p> <p>This issue affects Apache Struts: from 2.0.0 through 2.3.37, from 2.5.0 through 2.5.33, from 6.0.0 through 6.10.0, from 7.0.0 through 7.2.1.</p> <p>Users are recommended to upgrade to version 6.11.0 or 7.3.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-prrh-5r25-ch75 https://cve.radiocsirt.org/vuln/jvndb-2026-000121 <p>Apache Struts 2 provided by The Apache Software Foundation contains the following vulnerability:&lt;a href=&#39;https://cwe.mitre.org/data/definitions/770.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://www.cve.org/CVERecord?id=CVE-2026-73635&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Allocation of resources without limits or throttling (CWE-770) - CVE-2026-73635&lt;/li&gt;&lt;/ul&gt;KuniyoshiNoguchi reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>Apache Struts 2 provided by The Apache Software Foundation contains the following vulnerability:&lt;a href=&#39;https://cwe.mitre.org/data/definitions/770.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://www.cve.org/CVERecord?id=CVE-2026-73635&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Allocation of resources without limits or throttling (CWE-770) - CVE-2026-73635&lt;/li&gt;&lt;/ul&gt;KuniyoshiNoguchi reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2026-000121 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2848 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache Struts ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen und zu manipulieren oder um einen Denial of Service zu verursachen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache Struts ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen und zu manipulieren oder um einen Denial of Service zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2848