https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:43:31 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-09481 bdu:2024-09481 https://cve.radiocsirt.org/vuln/bdu:2024-09481 https://cve.radiocsirt.org/vuln/euvd-2026-162530 EUVD-2026-162530 https://cve.radiocsirt.org/vuln/euvd-2026-162530 https://cve.radiocsirt.org/vuln/fkie_cve-2024-8642 <p>In Eclipse Dataspace Components, from version 0.5.0 and before version 0.9.0, the ConsumerPullTransferTokenValidationApiController does not check for token validity (expiry, not-before, issuance date), which can allow an attacker to bypass the check for token expiration. The issue requires to have a dataplane configured to support http proxy consumer pull AND include the module &#34;transfer-data-plane&#34;. The affected code was marked deprecated from the version 0.6.0 in favour of Dataplane Signaling. In 0.9.0 the vulnerable code has been removed.</p> <p>In Eclipse Dataspace Components, from version 0.5.0 and before version 0.9.0, the ConsumerPullTransferTokenValidationApiController does not check for token validity (expiry, not-before, issuance date), which can allow an attacker to bypass the check for token expiration. The issue requires to have a dataplane configured to support http proxy consumer pull AND include the module &#34;transfer-data-plane&#34;. The affected code was marked deprecated from the version 0.6.0 in favour of Dataplane Signaling. In 0.9.0 the vulnerable code has been removed.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-8642 https://cve.radiocsirt.org/vuln/ghsa-8259-2x72-2gvc <p><strong>Affected:</strong> Maven: org.eclipse.edc:transfer-data-plane</p> <p>In Eclipse Dataspace Components, from version 0.5.0 and before version 0.9.0, the ConsumerPullTransferTokenValidationApiController does not check for token validity (expiry, not-before, issuance date), which can allow an attacker to bypass the check for token expiration. The issue requires to have a dataplane configured to support http proxy consumer pull AND include the module &#34;transfer-data-plane&#34;. The affected code was marked deprecated from the version 0.6.0 in favour of Dataplane Signaling. In 0.9.0 the vulnerable code has been removed.</p> <p><strong>Affected:</strong> Maven: org.eclipse.edc:transfer-data-plane</p> <p>In Eclipse Dataspace Components, from version 0.5.0 and before version 0.9.0, the ConsumerPullTransferTokenValidationApiController does not check for token validity (expiry, not-before, issuance date), which can allow an attacker to bypass the check for token expiration. The issue requires to have a dataplane configured to support http proxy consumer pull AND include the module &#34;transfer-data-plane&#34;. The affected code was marked deprecated from the version 0.6.0 in favour of Dataplane Signaling. In 0.9.0 the vulnerable code has been removed.</p> https://cve.radiocsirt.org/vuln/ghsa-8259-2x72-2gvc