https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 10:32:21 +0000 https://cve.radiocsirt.org/vuln/cleanstart-2026-la97257 <p><strong>Affected:</strong> CleanStart: apache-nifi-registry</p> <p>Security vulnerability affects the apache-nifi-registry package. This issue is resolved in later releases. See references for vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: apache-nifi-registry</p> <p>Security vulnerability affects the apache-nifi-registry package. This issue is resolved in later releases. See references for vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-la97257 https://cve.radiocsirt.org/vuln/cve-2026-22754 <p><strong>Affected:</strong> Spring Security, Red Hat OpenShift Developer Tools and Services, Red Hat build of Apache Camel for Spring Boot 4, Red Hat build of Apache Camel - HawtIO 4, Red Hat build of Quarkus, Red Hat Data Grid 8, Red Hat Fuse 7, Red Hat JBoss Enterprise Application Platform 7, Red Hat JBoss Enterprise Application Platform 8, Red Hat JBoss Enterprise Application Platform Expansion Pack and 3 more</p> <p>Vulnerability in Spring Spring Security. If an application uses &lt;sec:intercept-url servlet-path=&#34;/servlet-path&#34; pattern=&#34;/endpoint/**&#34;/&gt; to define the servlet path for computing a path matcher, then the servlet path is not included and the related authorization rules are not exercised. This can lead to an authorization bypass.This issue affects Spring Security: from 7.0.0 through 7.0.4.</p> <p><strong>Affected:</strong> Spring Security, Red Hat OpenShift Developer Tools and Services, Red Hat build of Apache Camel for Spring Boot 4, Red Hat build of Apache Camel - HawtIO 4, Red Hat build of Quarkus, Red Hat Data Grid 8, Red Hat Fuse 7, Red Hat JBoss Enterprise Application Platform 7, Red Hat JBoss Enterprise Application Platform 8, Red Hat JBoss Enterprise Application Platform Expansion Pack and 3 more</p> <p>Vulnerability in Spring Spring Security. If an application uses &lt;sec:intercept-url servlet-path=&#34;/servlet-path&#34; pattern=&#34;/endpoint/**&#34;/&gt; to define the servlet path for computing a path matcher, then the servlet path is not included and the related authorization rules are not exercised. This can lead to an authorization bypass.This issue affects Spring Security: from 7.0.0 through 7.0.4.</p> https://cve.radiocsirt.org/vuln/cve-2026-22754