https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 22:11:30 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-330898 EUVD-2026-330898 https://cve.radiocsirt.org/vuln/euvd-2026-330898 https://cve.radiocsirt.org/vuln/fkie_cve-2026-41732 <p>JsonPulsarHeaderMapper matched type headers against trusted packages using a prefix check, meaning that trusting any package implicitly trusted all of its subpackages. Additionally, an empty trusted-packages configuration fell back to trusting all packages rather than applying a safe default allow-list.</p> <p>Affected versions: Spring for Apache Pulsar 2.0.0 through 2.0.5; 1.2.0 through 1.2.17; 1.1.0 through 1.1.17.</p> <p>JsonPulsarHeaderMapper matched type headers against trusted packages using a prefix check, meaning that trusting any package implicitly trusted all of its subpackages. Additionally, an empty trusted-packages configuration fell back to trusting all packages rather than applying a safe default allow-list.</p> <p>Affected versions: Spring for Apache Pulsar 2.0.0 through 2.0.5; 1.2.0 through 1.2.17; 1.1.0 through 1.1.17.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-41732 https://cve.radiocsirt.org/vuln/ghsa-gg69-9wwp-6jx2 <p><strong>Affected:</strong> Maven: org.springframework.pulsar:spring-pulsar</p> <p>JsonPulsarHeaderMapper matched type headers against trusted packages using a prefix check, meaning that trusting any package implicitly trusted all of its subpackages. Additionally, an empty trusted-packages configuration fell back to trusting all packages rather than applying a safe default allow-list.</p> <p>Affected versions: Spring for Apache Pulsar 2.0.0 through 2.0.5; 1.2.0 through 1.2.17; 1.1.0 through 1.1.17.</p> <p><strong>Affected:</strong> Maven: org.springframework.pulsar:spring-pulsar</p> <p>JsonPulsarHeaderMapper matched type headers against trusted packages using a prefix check, meaning that trusting any package implicitly trusted all of its subpackages. Additionally, an empty trusted-packages configuration fell back to trusting all packages rather than applying a safe default allow-list.</p> <p>Affected versions: Spring for Apache Pulsar 2.0.0 through 2.0.5; 1.2.0 through 1.2.17; 1.1.0 through 1.1.17.</p> https://cve.radiocsirt.org/vuln/ghsa-gg69-9wwp-6jx2