https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 22:59:10 +0000 https://cve.radiocsirt.org/vuln/cve-2024-54676 <p><strong>Affected:</strong> Apache Software Foundation Apache OpenMeetings</p> <p>Vendor: The Apache Software Foundation</p> <p>Versions Affected: Apache OpenMeetings from 2.1.0 before 8.0.0</p> <p>Description: Default clustering instructions at https://openmeetings.apache.org/Clustering.html  doesn&#39;t specify white/black lists for OpenJPA this leads to possible deserialisation of untrusted data. Users are recommended to upgrade to version 8.0.0 and update their startup scripts to include the relevant &#39;openjpa.serialization.class.blacklist&#39; and &#39;openjpa.serialization.class.whitelist&#39; configurations as shown in the documentation.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache OpenMeetings</p> <p>Vendor: The Apache Software Foundation</p> <p>Versions Affected: Apache OpenMeetings from 2.1.0 before 8.0.0</p> <p>Description: Default clustering instructions at https://openmeetings.apache.org/Clustering.html  doesn&#39;t specify white/black lists for OpenJPA this leads to possible deserialisation of untrusted data. Users are recommended to upgrade to version 8.0.0 and update their startup scripts to include the relevant &#39;openjpa.serialization.class.blacklist&#39; and &#39;openjpa.serialization.class.whitelist&#39; configurations as shown in the documentation.</p> https://cve.radiocsirt.org/vuln/cve-2024-54676