https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:42:52 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0065 certfr-2026-avi-0065 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0065 https://cve.radiocsirt.org/vuln/euvd-2026-260017 EUVD-2026-260017 https://cve.radiocsirt.org/vuln/euvd-2026-260017 https://cve.radiocsirt.org/vuln/fkie_cve-2025-53689 <p>Blind XXE Vulnerabilities in jackrabbit-spi-commons and jackrabbit-core in Apache Jackrabbit &lt; 2.23.2 due to usage of an unsecured document build to load privileges.</p> <p>Users are recommended to upgrade to versions 2.20.17 (Java 8), 2.22.1 (Java 11) or 2.23.2 (Java 11, beta versions), which fix this issue. Earlier versions (up to 2.20.16) are not supported anymore, thus users should update to the respective supported version.</p> <p>Blind XXE Vulnerabilities in jackrabbit-spi-commons and jackrabbit-core in Apache Jackrabbit &lt; 2.23.2 due to usage of an unsecured document build to load privileges.</p> <p>Users are recommended to upgrade to versions 2.20.17 (Java 8), 2.22.1 (Java 11) or 2.23.2 (Java 11, beta versions), which fix this issue. Earlier versions (up to 2.20.16) are not supported anymore, thus users should update to the respective supported version.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-53689 https://cve.radiocsirt.org/vuln/ghsa-44c3-38h8-9fh9 <p><strong>Affected:</strong> Maven: org.apache.jackrabbit:jackrabbit-spi-commons, Maven: org.apache.jackrabbit:jackrabbit-core</p> <p>Blind XXE vulnerabilities in jackrabbit-spi-commons and jackrabbit-core in Apache Jackrabbit &lt; 2.23.2 due to usage of an unsecured document build to load privileges.</p> <p>Users are recommended to upgrade to versions 2.20.17 (Java 8), 2.22.1 (Java 11) or 2.23.2 (Java 11, beta versions), which fix this issue. Earlier versions (up to 2.20.16) are not supported anymore, thus users should update to the respective supported version.</p> <p><strong>Affected:</strong> Maven: org.apache.jackrabbit:jackrabbit-spi-commons, Maven: org.apache.jackrabbit:jackrabbit-core</p> <p>Blind XXE vulnerabilities in jackrabbit-spi-commons and jackrabbit-core in Apache Jackrabbit &lt; 2.23.2 due to usage of an unsecured document build to load privileges.</p> <p>Users are recommended to upgrade to versions 2.20.17 (Java 8), 2.22.1 (Java 11) or 2.23.2 (Java 11, beta versions), which fix this issue. Earlier versions (up to 2.20.16) are not supported anymore, thus users should update to the respective supported version.</p> https://cve.radiocsirt.org/vuln/ghsa-44c3-38h8-9fh9 https://cve.radiocsirt.org/vuln/ncsc-2026-0034 NCSC-2026-0034 https://cve.radiocsirt.org/vuln/ncsc-2026-0034 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-53689 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: jackrabbit, Ubuntu:16.04:LTS: jackrabbit, Ubuntu:18.04:LTS: jackrabbit, Ubuntu:20.04:LTS: jackrabbit, Ubuntu:22.04:LTS: jackrabbit, Ubuntu:24.04:LTS: jackrabbit, Ubuntu:25.10: jackrabbit, Ubuntu:26.04:LTS: jackrabbit</p> <p>Blind XXE Vulnerabilities in jackrabbit-spi-commons and jackrabbit-core in Apache Jackrabbit &lt; 2.23.2 due to usage of an unsecured document build to load privileges. Users are recommended to upgrade to versions 2.20.17 (Java 8), 2.22.1 (Java 11) or 2.23.2 (Java 11, beta versions), which fix this issue. Earlier versions (up to 2.20.16) are not supported anymore, thus users should update to the respective supported version.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: jackrabbit, Ubuntu:16.04:LTS: jackrabbit, Ubuntu:18.04:LTS: jackrabbit, Ubuntu:20.04:LTS: jackrabbit, Ubuntu:22.04:LTS: jackrabbit, Ubuntu:24.04:LTS: jackrabbit, Ubuntu:25.10: jackrabbit, Ubuntu:26.04:LTS: jackrabbit</p> <p>Blind XXE Vulnerabilities in jackrabbit-spi-commons and jackrabbit-core in Apache Jackrabbit &lt; 2.23.2 due to usage of an unsecured document build to load privileges. Users are recommended to upgrade to versions 2.20.17 (Java 8), 2.22.1 (Java 11) or 2.23.2 (Java 11, beta versions), which fix this issue. Earlier versions (up to 2.20.16) are not supported anymore, thus users should update to the respective supported version.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-53689 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1547 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Apache Jackrabbit Oak ausnutzen, um auf sensible Dateien oder Dienste zuzugreifen und möglicherweise andere nicht spezifizierte Angriffe durchzuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Apache Jackrabbit Oak ausnutzen, um auf sensible Dateien oder Dienste zuzugreifen und möglicherweise andere nicht spezifizierte Angriffe durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1547