https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 14:39:24 +0000 https://vulnerability.circl.lu/vuln/cleanstart-2026-yx84195 <p><strong>Affected:</strong> CleanStart: wildfly, CleanStart: wso2am</p> <p>CVE-2026-66274 affects multiple packages. A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. See references for individual vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: wildfly, CleanStart: wso2am</p> <p>CVE-2026-66274 affects multiple packages. A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service. See references for individual vulnerability details.</p> https://vulnerability.circl.lu/vuln/cleanstart-2026-yx84195 https://vulnerability.circl.lu/vuln/fkie_cve-2026-66274 <p>A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.</p> <p>This issue affects Apache Qpid Proton-J: through 0.34.1.</p> <p>Users are recommended to upgrade to version 0.35.0, which fixes the issue.</p> <p>A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.</p> <p>This issue affects Apache Qpid Proton-J: through 0.34.1.</p> <p>Users are recommended to upgrade to version 0.35.0, which fixes the issue.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-66274 https://vulnerability.circl.lu/vuln/ghsa-p2gc-fm5w-94jj <p>A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.</p> <p>This issue affects Apache Qpid Proton-J: through 0.34.1.</p> <p>Users are recommended to upgrade to version 0.35.0, which fixes the issue.</p> <p>A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.</p> <p>This issue affects Apache Qpid Proton-J: through 0.34.1.</p> <p>Users are recommended to upgrade to version 0.35.0, which fixes the issue.</p> https://vulnerability.circl.lu/vuln/ghsa-p2gc-fm5w-94jj https://vulnerability.circl.lu/vuln/rhsa-2026:63302 <p>io.quarkus:quarkus-qute: quarkus-qute:Server-Side Template Injection (SSTI) vulnerability in ReflectionValueResolver of the Quarkus Qute template engine resteasy-core: RESTeasy SourceProvider remote unauthenticated file read org.mongodb/mongodb-driver: MongoDB Driver: Credential disclosure via cleartext logging during client initialization io.netty/netty-handler: Netty: TLS hostname verification bypass via OpenSSL client path misconfiguration org.apache.httpcomponents.client5/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak qpid-proton-j: Apache Qpid Proton-J: Denial of Service via unbounded symbol value caching org.apache.qpid/proton-j: Apache Qpid Proton-J: Denial of Service due to excessive allocation org.apache.qpid/proton-j: Apache Qpid Proton-J: Denial of Service via unbounded type nesting org.apache.httpcomponents.client5/httpclient5: Apache HttpComponents Client: Server impersonation via improper TLS hostname verification</p> <p>io.quarkus:quarkus-qute: quarkus-qute:Server-Side Template Injection (SSTI) vulnerability in ReflectionValueResolver of the Quarkus Qute template engine resteasy-core: RESTeasy SourceProvider remote unauthenticated file read org.mongodb/mongodb-driver: MongoDB Driver: Credential disclosure via cleartext logging during client initialization io.netty/netty-handler: Netty: TLS hostname verification bypass via OpenSSL client path misconfiguration org.apache.httpcomponents.client5/httpclient5: Apache HttpComponents Client: Denial of Service due to connection leak qpid-proton-j: Apache Qpid Proton-J: Denial of Service via unbounded symbol value caching org.apache.qpid/proton-j: Apache Qpid Proton-J: Denial of Service due to excessive allocation org.apache.qpid/proton-j: Apache Qpid Proton-J: Denial of Service via unbounded type nesting org.apache.httpcomponents.client5/httpclient5: Apache HttpComponents Client: Server impersonation via improper TLS hostname verification</p> https://vulnerability.circl.lu/vuln/rhsa-2026:63302