https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-01T14:55:00.396996+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-89238 fkie_cve-2026-89238 2026-10-01T14:55:00.425733+00:00

WSS4J EncryptedHeader child confusion could promote an attacker-controlled plaintext element as the decrypted header, leading to incorrect confidentiality coverage and possible policy bypass. Users are recommended to upgrade to versions 4.0.2 or 3.0.6 or 2.4.4, which fix this issue.

 https://db.gcve.eu/vuln/ghsa-wm7f-562f-9g52 GHSA-wm7f-562f-9g52 2026-10-01T14:55:00.425826+00:00

WSS4J EncryptedHeader child confusion could promote an attacker-controlled plaintext element as the decrypted header, leading to incorrect confidentiality coverage and possible policy bypass. Users are recommended to upgrade to versions 4.0.2 or 3.0.6 or 2.4.4, which fix this issue.