https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 23:04:58 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1290 certfr-2026-avi-1290 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1290 https://cve.radiocsirt.org/vuln/euvd-2026-382940 EUVD-2026-382940 https://cve.radiocsirt.org/vuln/euvd-2026-382940 https://cve.radiocsirt.org/vuln/fkie_cve-2026-104714 <p>Concurrent execution using shared resource with improper synchronization (&#39;race condition&#39;) vulnerability in Apache Struts. Where a localized message formats a date or time argument, the formatter retained for that message by the application-wide text provider is used by concurrently served requests without isolation, so a value belonging to one user can appear in another user&#39;s response, or the rendering can fail and surface as a server error. Applications whose localized messages format no date or time arguments are not affected.</p> <p>This issue affects Apache Struts: from 2.0.0 through 2.3.37, from 2.5.0 through 2.5.33, from 6.0.0 through 6.11.0, from 7.0.0 through 7.3.0.</p> <p>Users are recommended to upgrade to version 6.12.0 or 7.4.0, which fixes the issue.</p> <p>Concurrent execution using shared resource with improper synchronization (&#39;race condition&#39;) vulnerability in Apache Struts. Where a localized message formats a date or time argument, the formatter retained for that message by the application-wide text provider is used by concurrently served requests without isolation, so a value belonging to one user can appear in another user&#39;s response, or the rendering can fail and surface as a server error. Applications whose localized messages format no date or time arguments are not affected.</p> <p>This issue affects Apache Struts: from 2.0.0 through 2.3.37, from 2.5.0 through 2.5.33, from 6.0.0 through 6.11.0, from 7.0.0 through 7.3.0.</p> <p>Users are recommended to upgrade to version 6.12.0 or 7.4.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-104714 https://cve.radiocsirt.org/vuln/ghsa-5fhf-r6vm-6wj7 <p>Concurrent execution using shared resource with improper synchronization (&#39;race condition&#39;) vulnerability in Apache Struts. Where a localized message formats a date or time argument, the formatter retained for that message by the application-wide text provider is used by concurrently served requests without isolation, so a value belonging to one user can appear in another user&#39;s response, or the rendering can fail and surface as a server error. Applications whose localized messages format no date or time arguments are not affected.</p> <p>This issue affects Apache Struts: from 2.0.0 through 2.3.37, from 2.5.0 through 2.5.33, from 6.0.0 through 6.11.0, from 7.0.0 through 7.3.0.</p> <p>Users are recommended to upgrade to version 6.12.0 or 7.4.0, which fixes the issue.</p> <p>Concurrent execution using shared resource with improper synchronization (&#39;race condition&#39;) vulnerability in Apache Struts. Where a localized message formats a date or time argument, the formatter retained for that message by the application-wide text provider is used by concurrently served requests without isolation, so a value belonging to one user can appear in another user&#39;s response, or the rendering can fail and surface as a server error. Applications whose localized messages format no date or time arguments are not affected.</p> <p>This issue affects Apache Struts: from 2.0.0 through 2.3.37, from 2.5.0 through 2.5.33, from 6.0.0 through 6.11.0, from 7.0.0 through 7.3.0.</p> <p>Users are recommended to upgrade to version 6.12.0 or 7.4.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-5fhf-r6vm-6wj7