https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-09T15:53:50.560241+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-120367 fkie_cve-2026-120367 2026-11-09T15:53:50.561897+00:00

Allocation of Resources Without Limits or Throttling vulnerability in Apache Axis2/Java. The JSON message builders, including the Gson, Moshi and HTTP/2 variants, buffered the entire request body with no size limit, so an unauthenticated caller could exhaust server memory with a large JSON request. Version 2.0.2 bounds JSON request bodies with the configurable jsonMaxRequestSize parameter. This issue affects Apache Axis2/Java: through 2.0.1. Users are recommended to upgrade to version 2.0.2, which fixes the issue.

 https://db.gcve.eu/vuln/ghsa-78w3-p65q-wwh7 GHSA-78w3-p65q-wwh7 2026-11-09T15:53:50.561955+00:00

Allocation of Resources Without Limits or Throttling vulnerability in Apache Axis2/Java. The JSON message builders, including the Gson, Moshi and HTTP/2 variants, buffered the entire request body with no size limit, so an unauthenticated caller could exhaust server memory with a large JSON request. Version 2.0.2 bounds JSON request bodies with the configurable jsonMaxRequestSize parameter. This issue affects Apache Axis2/Java: through 2.0.1. Users are recommended to upgrade to version 2.0.2, which fixes the issue.

 https://db.gcve.eu/vuln/wid-sec-w-2026-4415 WID-SEC-W-2026-4415 — Apache Axis2: Mehrere Schwachstellen 2026-11-09T15:53:50.561975+00:00

Ein Angreifer kann mehrere Schwachstellen in Apache Axis2 ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen, oder einen Denial of Service Angriff durchzuführen.