https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T14:39:24.570723+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cleanstart-2026-yx84195 CLEANSTART-2026-YX84195 — pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of… 2026-09-28T14:39:24.589963+00:00

Affected: CleanStart: wildfly, CleanStart: wso2am

CVE-2026-66274 affects multiple packages. A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. See references for individual vulnerability details.

 https://vulnerability.circl.lu/vuln/fkie_cve-2026-66274 fkie_cve-2026-66274 2026-09-28T14:39:24.590079+00:00

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.

This issue affects Apache Qpid Proton-J: through 0.34.1.

Users are recommended to upgrade to version 0.35.0, which fixes the issue.

 https://vulnerability.circl.lu/vuln/ghsa-p2gc-fm5w-94jj GHSA-p2gc-fm5w-94jj 2026-09-28T14:39:24.590140+00:00

A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.

This issue affects Apache Qpid Proton-J: through 0.34.1.

Users are recommended to upgrade to version 0.35.0, which fixes the issue.

 https://vulnerability.circl.lu/vuln/rhsa-2026:63302 RHSA-2026:63302 — Red Hat Security Advisory: Red Hat Build of Apache Camel 4.18 for Quarkus 3.33 update is now available (RHBQ 3.33.3.SP1) 2026-09-28T14:39:24.590171+00:00

io.quarkus:quarkus-qute: quarkus-qute:Server-Side Template Injection (SSTI) vulnerability in ReflectionValueResolver of the Quarkus Qute template engine resteasy-core: RESTeasy SourceProvider remote unauthenticated file read org.mongodb/mongodb-driver: MongoDB Driver: Credential disclosure via cleartext logging during client initialization io.netty/netty-handler: Netty: TLS hostname verification bypass via OpenSSL client path misconfiguration org.apache.httpcomponents.client5/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak qpid-proton-j: Apache Qpid Proton-J: Denial of Service via unbounded symbol value caching org.apache.qpid/proton-j: Apache Qpid Proton-J: Denial of Service due to excessive allocation org.apache.qpid/proton-j: Apache Qpid Proton-J: Denial of Service via unbounded type nesting org.apache.httpcomponents.client5/httpclient5: Apache HttpComponents Client: Server impersonation via improper TLS hostname verification