https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 10:11:45 +0000 https://cve.radiocsirt.org/vuln/cve-2024-22257 <p><strong>Affected:</strong> Spring Security, pivotal_software spring_security</p> <p>In Spring Security, versions 5.7.x prior to 5.7.12, 5.8.x prior to 5.8.11, versions 6.0.x prior to 6.0.9, versions 6.1.x prior to 6.1.8, versions 6.2.x prior to 6.2.3, an application is possible vulnerable to broken access control when it directly uses the AuthenticatedVoter#vote passing a null Authentication parameter.</p> <p><strong>Affected:</strong> Spring Security, pivotal_software spring_security</p> <p>In Spring Security, versions 5.7.x prior to 5.7.12, 5.8.x prior to 5.8.11, versions 6.0.x prior to 6.0.9, versions 6.1.x prior to 6.1.8, versions 6.2.x prior to 6.2.3, an application is possible vulnerable to broken access control when it directly uses the AuthenticatedVoter#vote passing a null Authentication parameter.</p> https://cve.radiocsirt.org/vuln/cve-2024-22257 https://cve.radiocsirt.org/vuln/ghsa-3677-xxcr-wjqv <p><strong>Affected:</strong> Maven: org.bitbucket.b_c:jose4j</p> <p>In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ratio. When this token is processed by the server, it results in significant memory allocation and processing time during decompression.</p> <p><strong>Affected:</strong> Maven: org.bitbucket.b_c:jose4j</p> <p>In jose4j before 0.9.6, an attacker can cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an exceptionally high compression ratio. When this token is processed by the server, it results in significant memory allocation and processing time during decompression.</p> https://cve.radiocsirt.org/vuln/ghsa-3677-xxcr-wjqv