https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:53:29 +0000 https://cve.radiocsirt.org/vuln/cve-2021-21345 <p><strong>Affected:</strong> x-stream xstream</p> <p>XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker who has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream&#39;s security framework with a whitelist limited to the minimal required types. If you rely on XStream&#39;s default blacklist of the Security Framework, you will have to use at least version 1.4.16.</p> <p><strong>Affected:</strong> x-stream xstream</p> <p>XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker who has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream&#39;s security framework with a whitelist limited to the minimal required types. If you rely on XStream&#39;s default blacklist of the Security Framework, you will have to use at least version 1.4.16.</p> https://cve.radiocsirt.org/vuln/cve-2021-21345