https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 04:44:18 +0000 https://cve.radiocsirt.org/vuln/cleanstart-2026-ae18231 <p><strong>Affected:</strong> CleanStart: cassandra, CleanStart: thingsboard, CleanStart: trino</p> <p>ghsa-p47f-322f-whfh affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: cassandra, CleanStart: thingsboard, CleanStart: trino</p> <p>ghsa-p47f-322f-whfh affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-ae18231 https://cve.radiocsirt.org/vuln/cve-2026-9828 <p><strong>Affected:</strong> QOS.CH Sarl logback</p> <p>Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core (HardenedObjectInputStream (logback-core) modules) allows Object Injection albeit heavily restricted.</p> <p>More precisely, an attacker able to influence serialized data sent to SimpleSocketServer or SimpleSSLSocketServer can instantiate objects from classes in the java.lang and java.util packages that are not explicitly blocked.</p> <p>Although deserialization is heavily restricted by HardenedObjectInputStream and no practical way to achieve remote code execution or significant privilege escalation has been identified, this issue constitutes a bypass of the intended security restrictions.</p> <p>This issue affects logback: through 1.5.32 inclusive.</p> <p><strong>Affected:</strong> QOS.CH Sarl logback</p> <p>Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core (HardenedObjectInputStream (logback-core) modules) allows Object Injection albeit heavily restricted.</p> <p>More precisely, an attacker able to influence serialized data sent to SimpleSocketServer or SimpleSSLSocketServer can instantiate objects from classes in the java.lang and java.util packages that are not explicitly blocked.</p> <p>Although deserialization is heavily restricted by HardenedObjectInputStream and no practical way to achieve remote code execution or significant privilege escalation has been identified, this issue constitutes a bypass of the intended security restrictions.</p> <p>This issue affects logback: through 1.5.32 inclusive.</p> https://cve.radiocsirt.org/vuln/cve-2026-9828