https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-30T22:18:09.423192+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-89238 CVE-2026-89238 — Apache WSS4J: WSS4J EncryptedHeader child confusion causing wrong protected-header selection 2026-09-30T22:18:09.425506+00:00

Affected: Apache Software Foundation Apache WSS4J

WSS4J EncryptedHeader child confusion could promote an attacker-controlled plaintext element as the decrypted header, leading to incorrect confidentiality coverage and possible policy bypass. Users are recommended to upgrade to versions 4.0.2 or 3.0.6 or 2.4.4, which fix this issue.