https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T16:17:09.118379+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-92785 fkie_cve-2026-92785 2026-09-28T16:17:09.146960+00:00

Angel through 3.3.0 deserializes untrusted setAlgoMetrics payload using Kryo without class registration or allowlist validation. Unauthenticated network attackers can instantiate arbitrary classes or exhaust coordinator memory by sending crafted serialized objects to the master RPC endpoint.

 https://db.gcve.eu/vuln/ghsa-49pw-fq48-934x GHSA-49pw-fq48-934x 2026-09-28T16:17:09.147043+00:00

Angel through 3.3.0 deserializes untrusted setAlgoMetrics payload using Kryo without class registration or allowlist validation. Unauthenticated network attackers can instantiate arbitrary classes or exhaust coordinator memory by sending crafted serialized objects to the master RPC endpoint.