https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 09 Nov 2026 20:38:47 +0000 https://db.gcve.eu/vuln/cleanstart-2026-kc47770 <p><strong>Affected:</strong> CleanStart: apache-nifi-registry</p> <p>Security vulnerability affects the apache-nifi-registry package. This issue is resolved in later releases. See references for vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: apache-nifi-registry</p> <p>Security vulnerability affects the apache-nifi-registry package. This issue is resolved in later releases. See references for vulnerability details.</p> https://db.gcve.eu/vuln/cleanstart-2026-kc47770 https://db.gcve.eu/vuln/cve-2026-40976 <p><strong>Affected:</strong> Spring Boot, Red Hat AMQ Broker 7, Red Hat AMQ Clients, Red Hat build of Apache Camel for Spring Boot 4, Red Hat build of Apache Camel - HawtIO 4, Red Hat build of OptaPlanner 8, Red Hat Data Grid 8, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Fuse 7 and 6 more</p> <p>In certain circumstances, Spring Boot&#39;s default web security is ineffective allowing unauthorized access to all endpoints. For an application to be vulnerable, it must: be a servlet-based web application; have no Spring Security configuration of its own and rely on the default web security filter chain; depend on spring-boot-actuator-autoconfigure; not depend on spring-boot-health. If any of the above does not apply, the application is not vulnerable.</p> <p>Affected: Spring Boot 4.0.0–4.0.5; upgrade to 4.0.6 or later per vendor advisory.</p> <p><strong>Affected:</strong> Spring Boot, Red Hat AMQ Broker 7, Red Hat AMQ Clients, Red Hat build of Apache Camel for Spring Boot 4, Red Hat build of Apache Camel - HawtIO 4, Red Hat build of OptaPlanner 8, Red Hat Data Grid 8, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Fuse 7 and 6 more</p> <p>In certain circumstances, Spring Boot&#39;s default web security is ineffective allowing unauthorized access to all endpoints. For an application to be vulnerable, it must: be a servlet-based web application; have no Spring Security configuration of its own and rely on the default web security filter chain; depend on spring-boot-actuator-autoconfigure; not depend on spring-boot-health. If any of the above does not apply, the application is not vulnerable.</p> <p>Affected: Spring Boot 4.0.0–4.0.5; upgrade to 4.0.6 or later per vendor advisory.</p> https://db.gcve.eu/vuln/cve-2026-40976