CVE-2026-11607 TYPO3 CMS - Broken Access Control in Form Framework

Backend users with access to the Form Framework were able to use files not ending in .form.yaml as form definitions, which were processed without denying the incorrect file extension. Maliciously crafted form definition files can be used to execute arbitrary SQL statements, allowing attackers to...

TYPO3-CORE-SA-2026-019: Broken Access Control in Form Framework

More info at https://typo3.org/security/advisory/typo3-core-sa-2026-019...

TYPO3-CORE-SA-2026-017: Privilege Escalation & SQL Injection in Form Framework

More info at https://typo3.org/security/advisory/typo3-core-sa-2026-017...

TYPO3-CORE-SA-2026-008: Broken Access Control in Form Framework

More info at https://typo3.org/security/advisory/typo3-core-sa-2026-008...

CVE-2026-41976

Permission control vulnerability in the audio framework. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

EUVD-2009-5128

Catalyst::Plugin::Authentication versions before 0.10027 for Perl is susceptible to session fixation attacks. Catalyst::Plugin::Authentication does not automatically change the session id after authentication. An attacker that obtains a session id cookie can use this to impersonate the victim...

CVE-2026-41976

Permission control vulnerability in the audio framework. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

EUVD-2026-35362

Permission control vulnerability in the audio framework. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-41976

CVE-2026-41976 is described as a permission control vulnerability in the audio framework with potential impact on service confidentiality. The available data include CVSS v3.1 metrics: local attack vector, no privileges required, user interaction required, confidentiality impact High, integrity a...

CVE-2026-41976

Permission control vulnerability in the audio framework. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

Spring Framework Unsafe Deserialization via Jackson JMS Converters

In an untrusted JMS environment, org.springframework.jms.support.converter.MappingJackson2MessageConverter and org.springframework.jms.support.converter.JacksonJsonMessageConverter allow arbitrary class instantiation, which can lead to unauthorized actions via gadget class deserialization. Affect...

GHSA-9F52-RJQV-25QV Spring Framework Arbitrary Method Invocation in SpEL Expressions

A vulnerability in Spring Expression Language SpEL evaluation logic allows for arbitrary zero-argument method invocation, even within restricted or read-only contexts, which may allow an attacker to invoke unintended application logic. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2....

Spring Framework Security Filter Bypass in WebFlux Kotlin Router DSL

Spring WebFlux applications may be vulnerable to a security bypass when using the Kotlin Router DSL. Affected versions: Spring Framework 5.3.0 through 5.3.48...

Spring Framework Denial of Service via Unbounded Cache in SpEL

Applications which accept user-supplied Spring Expression Language SpEL expressions may be vulnerable to a Denial of Service DoS attack if the evaluation of a SpEL expression triggers unbounded cache growth. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18; 6.1.0...

com.cottsoft.thrift.framework:thrift-framework (0.0.1) potentially affected by CVE-2026-41855 via org.springframework:spring-jms (3.2.7.release)

org.springframework:spring-jms MAVEN version 3.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-jms and may be impacted: - com.cottsoft.thrift.framework:thrift-framework 0.0.1 Source cves: CVE-2026-41855 Source...

GHSA-R5W3-XV2F-J59Q Spring Framework Algorithmic Denial of Service via SpEL Expressions

Applications that evaluate user-supplied Spring Expression Language SpEL expressions are vulnerable to an Algorithmic Denial of Service DoS. By providing a specially crafted expression, an attacker can trigger excessive resource consumption during evaluation, leading to application degradation or...

GHSA-957G-F97V-VPPC Spring Framework Cross-site Scripting via JSP Form Tags

Spring MVC applications which accept user-supplied values in the cssClass, cssErrorClass, or cssStyle attributes of JSP form tags allow arbitrary HTML/JavaScript code injection, potentially resulting in a cross-site scripting XSS vulnerability. Affected versions: Spring Framework 7.0.0 through...

br.com.jarch:jarch-framework (>=2.23.0, <=18.3.1), ch.epfl.bbp.nlp:bluima_abbreviations (>=1.0.0, <=1.0.1) +924 more potentially affected by CVE-2026-41848 via org.springframework:spring-core (3.1.2.release)

org.springframework:spring-core MAVEN version 3.1.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-core and may be impacted: - br.com.jarch:jarch-framework =2.23.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0,...

GHSA-659M-PX2C-25WJ Spring Framework Denial of Service via AntPathMatcher

Applications may be vulnerable to a Regular Expression Denial of Service ReDoS attack if an attacker is able to provide a pattern which is then directly or indirectly supplied to one of the following methods in AntPathMatcher: matchString pattern, String path, matchStartString pattern, String pat...

Spring Framework Server-Side Request Forgery via UriComponentsBuilder

Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and validate an externally provided URL string may be exposed to a server-side request forgery SSRF attack. Affected versions: Spring Framework 7.0.0 through 7.0.7; 6.2.0 through 6.2.18...