Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 11 Oct 2026 21:40:28 +0000 certfr-2026-avi-1165 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… https://vulnerability.circl.lu/vuln/certfr-2026-avi-1165 certfr-2026-avi-1165 https://vulnerability.circl.lu/vuln/certfr-2026-avi-1165 CLEANSTART-2026-KL61134 — application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when using a distrib… https://vulnerability.circl.lu/vuln/cleanstart-2026-kl61134 <p><strong>Affected:</strong> CleanStart: apache-nifi-registry</p> <p>Security vulnerability affects the apache-nifi-registry package. An application using Spring Security&#39;s WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store.</p> <p><strong>Affected:</strong> CleanStart: apache-nifi-registry</p> <p>Security vulnerability affects the apache-nifi-registry package. An application using Spring Security&#39;s WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store.</p> https://vulnerability.circl.lu/vuln/cleanstart-2026-kl61134 fkie_cve-2026-47841 https://vulnerability.circl.lu/vuln/fkie_cve-2026-47841 <p>An application using Spring Security&#39;s WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Spring Security 6.4.0 - 6.4.18</p> <p>An application using Spring Security&#39;s WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Spring Security 6.4.0 - 6.4.18</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-47841 GHSA-326h-rh66-6gp9 https://vulnerability.circl.lu/vuln/ghsa-326h-rh66-6gp9 <p>An application using Spring Security&#39;s WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Spring Security 6.4.0 - 6.4.18</p> <p>An application using Spring Security&#39;s WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store. Spring Security 7.1.0 Spring Security 7.0.0 - 7.0.6 Spring Security 6.5.0 - 6.5.11 Spring Security 6.4.0 - 6.4.18</p> https://vulnerability.circl.lu/vuln/ghsa-326h-rh66-6gp9