https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 08:02:41 +0000 https://cve.radiocsirt.org/vuln/cleanstart-2026-aa33839 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: activemq</p> <p>Package activemq version 6.2.3-r1 fixes 10 vulnerabilities: CVE-2026-34477, CVE-2026-34478, CVE-2026-34480, CVE-2026-22745, CVE-2026-22741...</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> CleanStart: activemq</p> <p>Package activemq version 6.2.3-r1 fixes 10 vulnerabilities: CVE-2026-34477, CVE-2026-34478, CVE-2026-34480, CVE-2026-22745, CVE-2026-22741...</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-aa33839 https://cve.radiocsirt.org/vuln/cve-2026-22741 <p><strong>Affected:</strong> VMware Spring Framework</p> <p>Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.</p> <p>More precisely, an application can be vulnerable when all the following are true:</p> <p>* the application is using Spring MVC or Spring WebFlux * the application is configuring the  resource chain support https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title  with caching enabled * the application adds support for encoded resources resolution * the resource cache must be empty when the attacker has access to the application</p> <p>When all the conditions above are met, the attacker can send malicious requests and poison the resource cache with resources using the wrong encoding. This can cause a denial of service by breaking the front-end application for clients.</p> <p><strong>Affected:</strong> VMware Spring Framework</p> <p>Spring MVC and WebFlux applications are vulnerable to cache poisoning when resolving static resources.</p> <p>More precisely, an application can be vulnerable when all the following are true:</p> <p>* the application is using Spring MVC or Spring WebFlux * the application is configuring the  resource chain support https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title  with caching enabled * the application adds support for encoded resources resolution * the resource cache must be empty when the attacker has access to the application</p> <p>When all the conditions above are met, the attacker can send malicious requests and poison the resource cache with resources using the wrong encoding. This can cause a denial of service by breaking the front-end application for clients.</p> https://cve.radiocsirt.org/vuln/cve-2026-22741