https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 20:45:17 +0000 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0719 certfr-2026-avi-0719 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0719 https://cve.radiocsirt.org/vuln/euvd-2026-330904 EUVD-2026-330904 https://cve.radiocsirt.org/vuln/euvd-2026-330904 https://cve.radiocsirt.org/vuln/fkie_cve-2026-41008 <p>Spring Security Authorization Server&#39;s authorization endpoint performs insufficient validation of the request_uri parameter. An attacker can craft a malicious authorization request containing an invalid request_uri and an arbitrary, unvalidated redirect_uri, which can lead to an Open Redirect vulnerability.</p> <p>Affected versions: Spring Security 7.0.0 through 7.0.5. Spring Authorization Server 1.5.0 through 1.5.7.</p> <p>Spring Security Authorization Server&#39;s authorization endpoint performs insufficient validation of the request_uri parameter. An attacker can craft a malicious authorization request containing an invalid request_uri and an arbitrary, unvalidated redirect_uri, which can lead to an Open Redirect vulnerability.</p> <p>Affected versions: Spring Security 7.0.0 through 7.0.5. Spring Authorization Server 1.5.0 through 1.5.7.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-41008 https://cve.radiocsirt.org/vuln/ghsa-4r8w-73jc-3m7q <p><strong>Affected:</strong> Maven: org.springframework.security:spring-security-oauth2-authorization-server</p> <p>Spring Security Authorization Server&#39;s authorization endpoint performs insufficient validation of the request_uri parameter. An attacker can craft a malicious authorization request containing an invalid request_uri and an arbitrary, unvalidated redirect_uri, which can lead to an Open Redirect vulnerability.</p> <p>Affected versions: Spring Security 7.0.0 through 7.0.5. Spring Authorization Server 1.5.0 through 1.5.7.</p> <p><strong>Affected:</strong> Maven: org.springframework.security:spring-security-oauth2-authorization-server</p> <p>Spring Security Authorization Server&#39;s authorization endpoint performs insufficient validation of the request_uri parameter. An attacker can craft a malicious authorization request containing an invalid request_uri and an arbitrary, unvalidated redirect_uri, which can lead to an Open Redirect vulnerability.</p> <p>Affected versions: Spring Security 7.0.0 through 7.0.5. Spring Authorization Server 1.5.0 through 1.5.7.</p> https://cve.radiocsirt.org/vuln/ghsa-4r8w-73jc-3m7q https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1869 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Security ausnutzen, um einen Denial of Service zu verursachen, beliebigen Code auszuführen, Benutzer auf beliebige Websites umzuleiten, Informationen offenzulegen und die Identität eines anderen Benutzers anzunehmen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Security ausnutzen, um einen Denial of Service zu verursachen, beliebigen Code auszuführen, Benutzer auf beliebige Websites umzuleiten, Informationen offenzulegen und die Identität eines anderen Benutzers anzunehmen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1869