Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 22:09:00 +0000 certfr-2026-avi-0504 — De multiples vulnérabilités ont été découvertes dans Spring. Certaines d'entre elles permettent à un attaquant de provo… https://cve.radiocsirt.org/vuln/certfr-2026-avi-0504 certfr-2026-avi-0504 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0504 EUVD-2026-306143 https://cve.radiocsirt.org/vuln/euvd-2026-306143 EUVD-2026-306143 https://cve.radiocsirt.org/vuln/euvd-2026-306143 fkie_cve-2026-40969 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40969 <p>The raw message of every server-side AuthenticationException is returned to the unauthenticated remote caller in the gRPC status description. This allows an attacker to obtain information about the authentication failure, which may be useful for further attacks.</p> <p>Affected versions: Spring gRPC: 1.0.0 - 1.0.2 (fixed in 1.0.3). Older, unsupported versions are also affected.</p> <p>The raw message of every server-side AuthenticationException is returned to the unauthenticated remote caller in the gRPC status description. This allows an attacker to obtain information about the authentication failure, which may be useful for further attacks.</p> <p>Affected versions: Spring gRPC: 1.0.0 - 1.0.2 (fixed in 1.0.3). Older, unsupported versions are also affected.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-40969 GHSA-37w2-q6vh-45v6 — Spring gRPC AuthenticationException messages are reflected to remote client https://cve.radiocsirt.org/vuln/ghsa-37w2-q6vh-45v6 <p><strong>Affected:</strong> Maven: org.springframework.grpc:spring-grpc</p> <p>The raw message of every server-side AuthenticationException is returned to the unauthenticated remote caller in the gRPC status description. This allows an attacker to obtain information about the authentication failure, which may be useful for further attacks.</p> <p>Affected versions: Spring gRPC: 1.0.0 - 1.0.2 (fixed in 1.0.3). Older, unsupported versions are also affected.</p> <p><strong>Affected:</strong> Maven: org.springframework.grpc:spring-grpc</p> <p>The raw message of every server-side AuthenticationException is returned to the unauthenticated remote caller in the gRPC status description. This allows an attacker to obtain information about the authentication failure, which may be useful for further attacks.</p> <p>Affected versions: Spring gRPC: 1.0.0 - 1.0.2 (fixed in 1.0.3). Older, unsupported versions are also affected.</p> https://cve.radiocsirt.org/vuln/ghsa-37w2-q6vh-45v6