https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 15:59:11 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-231634 EUVD-2026-231634 https://cve.radiocsirt.org/vuln/euvd-2026-231634 https://cve.radiocsirt.org/vuln/fkie_cve-2022-32531 <p>The Apache Bookkeeper Java Client (before 4.14.6 and also 4.15.0) does not close the connection to the bookkeeper server when TLS hostname verification fails. This leaves the bookkeeper client vulnerable to a man in the middle attack.</p> <p>The problem affects BookKeeper client prior to versions 4.14.6 and 4.15.1.</p> <p>The Apache Bookkeeper Java Client (before 4.14.6 and also 4.15.0) does not close the connection to the bookkeeper server when TLS hostname verification fails. This leaves the bookkeeper client vulnerable to a man in the middle attack.</p> <p>The problem affects BookKeeper client prior to versions 4.14.6 and 4.15.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-32531 https://cve.radiocsirt.org/vuln/ghsa-gxq5-79m2-gvvq <p><strong>Affected:</strong> Maven: org.apache.bookkeeper:bookkeeper-common</p> <p>The Apache Bookkeeper Java Client (before 4.14.6 and also 4.15.0) does not close the connection to the bookkeeper server when TLS hostname verification fails. This leaves the bookkeeper client vulnerable to a man in the middle attack. The problem affects BookKeeper client prior to versions 4.14.6 and 4.15.1.</p> <p><strong>Affected:</strong> Maven: org.apache.bookkeeper:bookkeeper-common</p> <p>The Apache Bookkeeper Java Client (before 4.14.6 and also 4.15.0) does not close the connection to the bookkeeper server when TLS hostname verification fails. This leaves the bookkeeper client vulnerable to a man in the middle attack. The problem affects BookKeeper client prior to versions 4.14.6 and 4.15.1.</p> https://cve.radiocsirt.org/vuln/ghsa-gxq5-79m2-gvvq https://cve.radiocsirt.org/vuln/gsd-2022-32531 gsd-2022-32531 https://cve.radiocsirt.org/vuln/gsd-2022-32531 https://cve.radiocsirt.org/vuln/pysec-2022-43060 <p><strong>Affected:</strong> PyPI: apache-bookkeeper-client</p> <p>The Apache Bookkeeper Java Client (before 4.14.6 and also 4.15.0) does not close the connection to the bookkeeper server when TLS hostname verification fails. This leaves the bookkeeper client vulnerable to a man in the middle attack.</p> <p>The problem affects BookKeeper client prior to versions 4.14.6 and 4.15.1.</p> <p><strong>Affected:</strong> PyPI: apache-bookkeeper-client</p> <p>The Apache Bookkeeper Java Client (before 4.14.6 and also 4.15.0) does not close the connection to the bookkeeper server when TLS hostname verification fails. This leaves the bookkeeper client vulnerable to a man in the middle attack.</p> <p>The problem affects BookKeeper client prior to versions 4.14.6 and 4.15.1.</p> https://cve.radiocsirt.org/vuln/pysec-2022-43060 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-32531 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: bookkeeper, Ubuntu:18.04:LTS: bookkeeper, Ubuntu:20.04:LTS: bookkeeper, Ubuntu:22.04:LTS: bookkeeper</p> <p>The Apache Bookkeeper Java Client (before 4.14.6 and also 4.15.0) does not close the connection to the bookkeeper server when TLS hostname verification fails. This leaves the bookkeeper client vulnerable to a man in the middle attack. The problem affects BookKeeper client prior to versions 4.14.6 and 4.15.1.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: bookkeeper, Ubuntu:18.04:LTS: bookkeeper, Ubuntu:20.04:LTS: bookkeeper, Ubuntu:22.04:LTS: bookkeeper</p> <p>The Apache Bookkeeper Java Client (before 4.14.6 and also 4.15.0) does not close the connection to the bookkeeper server when TLS hostname verification fails. This leaves the bookkeeper client vulnerable to a man in the middle attack. The problem affects BookKeeper client prior to versions 4.14.6 and 4.15.1.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-32531