Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 02:30:40 +0000 certfr-2026-avi-0705 — De multiples vulnérabilités ont été découvertes dans les produits Spring. Certaines d'entre elles permettent à un attaq… https://cve.radiocsirt.org/vuln/certfr-2026-avi-0705 certfr-2026-avi-0705 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0705 EUVD-2026-330894 https://cve.radiocsirt.org/vuln/euvd-2026-330894 EUVD-2026-330894 https://cve.radiocsirt.org/vuln/euvd-2026-330894 fkie_cve-2026-40991 https://cve.radiocsirt.org/vuln/fkie_cve-2026-40991 <p>When using spring-restdocs-webtestclient or spring-restdocs-restassured to document a remote API accessed over HTTP, an attacker who compromises the API or tricks the user into documenting a malicious API can perform an XXE injection attack when the documentation-generating tests are next executed.</p> <p>Affected versions: Spring REST Docs 4.0.0; 3.0.0 through 3.0.5; 2.0.0.RELEASE through 2.0.8.RELEASE.</p> <p>When using spring-restdocs-webtestclient or spring-restdocs-restassured to document a remote API accessed over HTTP, an attacker who compromises the API or tricks the user into documenting a malicious API can perform an XXE injection attack when the documentation-generating tests are next executed.</p> <p>Affected versions: Spring REST Docs 4.0.0; 3.0.0 through 3.0.5; 2.0.0.RELEASE through 2.0.8.RELEASE.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-40991 GHSA-6rpq-6vv2-5222 — Spring REST Docs REST Assured & WebFlux are vulnerable to Improper Restriction of XML External Entity Reference https://cve.radiocsirt.org/vuln/ghsa-6rpq-6vv2-5222 <p><strong>Affected:</strong> Maven: org.springframework.restdocs:spring-restdocs-webtestclient, Maven: org.springframework.restdocs:spring-restdocs-restassured</p> <p>When using spring-restdocs-webtestclient or spring-restdocs-restassured to document a remote API accessed over HTTP, an attacker who compromises the API or tricks the user into documenting a malicious API can perform an XXE injection attack when the documentation-generating tests are next executed.</p> <p>Affected versions: Spring REST Docs 4.0.0; 3.0.0 through 3.0.5; 2.0.0.RELEASE through 2.0.8.RELEASE.</p> <p><strong>Affected:</strong> Maven: org.springframework.restdocs:spring-restdocs-webtestclient, Maven: org.springframework.restdocs:spring-restdocs-restassured</p> <p>When using spring-restdocs-webtestclient or spring-restdocs-restassured to document a remote API accessed over HTTP, an attacker who compromises the API or tricks the user into documenting a malicious API can perform an XXE injection attack when the documentation-generating tests are next executed.</p> <p>Affected versions: Spring REST Docs 4.0.0; 3.0.0 through 3.0.5; 2.0.0.RELEASE through 2.0.8.RELEASE.</p> https://cve.radiocsirt.org/vuln/ghsa-6rpq-6vv2-5222