https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 17:15:26 +0000 https://cve.radiocsirt.org/vuln/cleanstart-2026-am99343 <p><strong>Affected:</strong> CleanStart: druid-fips, CleanStart: kafka-ui, CleanStart: stargate</p> <p>ghsa-xwmg-2g98-w7v9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: druid-fips, CleanStart: kafka-ui, CleanStart: stargate</p> <p>ghsa-xwmg-2g98-w7v9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-am99343 https://cve.radiocsirt.org/vuln/cve-2025-53864 <p><strong>Affected:</strong> Connect2id Nimbus JOSE+JWT</p> <p>Connect2id Nimbus JOSE + JWT 10.0.x before 10.0.2 and 9.37.x before 9.37.4 allows a remote attacker to cause a denial of service via a deeply nested JSON object supplied in a JWT claim set, because of uncontrolled recursion. NOTE: this is independent of the Gson 2.11.0 issue because the Connect2id product could have checked the JSON object nesting depth, regardless of what limits (if any) were imposed by Gson.</p> <p><strong>Affected:</strong> Connect2id Nimbus JOSE+JWT</p> <p>Connect2id Nimbus JOSE + JWT 10.0.x before 10.0.2 and 9.37.x before 9.37.4 allows a remote attacker to cause a denial of service via a deeply nested JSON object supplied in a JWT claim set, because of uncontrolled recursion. NOTE: this is independent of the Gson 2.11.0 issue because the Connect2id product could have checked the JSON object nesting depth, regardless of what limits (if any) were imposed by Gson.</p> https://cve.radiocsirt.org/vuln/cve-2025-53864