https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-05T19:51:31.111479+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/bdu:2026-09787 bdu:2026-09787 2026-10-05T19:51:31.182073+00:00 bdu:2026-09787 https://db.gcve.eu/vuln/cleanstart-2026-ab08507 Withdrawn: CLEANSTART-2026-AB08507 — Security fixes for CVE-2026-42583, ghsa-72hv-8253-57qq, ghsa-mj4r-2hfc-f8p6 applied in versions: 3.8.6-r0, 3.8.6-r1 2026-10-05T19:51:31.182126+00:00

Withdrawn by the publisher.

Affected: CleanStart: apache-zookeeper

Multiple security vulnerabilities affect the apache-zookeeper package. These issues are resolved in later releases. See references for individual vulnerability details.

 https://db.gcve.eu/vuln/cve-2026-42583 CVE-2026-42583 — Netty: Lz4FrameDecoder resource exhaustion 2026-10-05T19:51:31.182174+00:00

Affected: netty, io.netty netty-codec, io.netty netty-codec-compression

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Lz4FrameDecoder allocates a ByteBuf of size decompressedLength (up to 32 MB per block) before LZ4 runs. A peer only needs a 21-byte header plus compressedLength payload bytes - 22 bytes if compressedLength == 1 - to force that allocation. This vulnerability is fixed in 4.2.13.Final and 4.1.133.Final.