https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 20:38:52 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-9757 EUVD-2026-9757 https://cve.radiocsirt.org/vuln/euvd-2026-9757 https://cve.radiocsirt.org/vuln/fkie_cve-2023-46131 <p>Grails is a framework used to build web applications with the Groovy programming language. A specially crafted web request can lead to a JVM crash or denial of service. Any Grails framework application using Grails data binding is vulnerable. This issue has been patched in version 3.3.17, 4.1.3, 5.3.4, 6.1.0.</p> <p>Grails is a framework used to build web applications with the Groovy programming language. A specially crafted web request can lead to a JVM crash or denial of service. Any Grails framework application using Grails data binding is vulnerable. This issue has been patched in version 3.3.17, 4.1.3, 5.3.4, 6.1.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-46131 https://cve.radiocsirt.org/vuln/ghsa-3pjv-r7w4-2cf5 <p><strong>Affected:</strong> Maven: org.grails:grails-databinding</p> <p>### Impact A specially crafted web request can lead to a JVM crash or denial of service. Any Grails framework application using Grails data binding is vulnerable.</p> <p>### Patches Patches are available for Grails 3 and later.</p> <p>### Workarounds No workaround is possible except to avoid data binding to request data.</p> <p>### References</p> <p>- [Blog post](https://grails.org/blog/2023-12-20-cve-data-binding-dos.html) - [Discussion](https://github.com/grails/grails-core/issues/13302) - [Mitre CVD record](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46131)</p> <p><strong>Affected:</strong> Maven: org.grails:grails-databinding</p> <p>### Impact A specially crafted web request can lead to a JVM crash or denial of service. Any Grails framework application using Grails data binding is vulnerable.</p> <p>### Patches Patches are available for Grails 3 and later.</p> <p>### Workarounds No workaround is possible except to avoid data binding to request data.</p> <p>### References</p> <p>- [Blog post](https://grails.org/blog/2023-12-20-cve-data-binding-dos.html) - [Discussion](https://github.com/grails/grails-core/issues/13302) - [Mitre CVD record](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46131)</p> https://cve.radiocsirt.org/vuln/ghsa-3pjv-r7w4-2cf5 https://cve.radiocsirt.org/vuln/gsd-2023-46131 gsd-2023-46131 https://cve.radiocsirt.org/vuln/gsd-2023-46131