1292 matches found
This Week in Spring – December 16th, 2025
Hi, Spring fans! Welcome to another installment of This Week in Spring! And what a week it’s been! We’ve got around nine shopping days ’til Christmas, and the New Year is almost here! Things are moving so quickly and the Spring community is no exception! Let's dive into this week's wonderful...
CVE-2025-14038
EDB Hybrid Manager contains a flaw that allows an unauthenticated attacker to directly access certain gRPC endpoints. This could allow an attacker to read potentially sensitive data or possibly cause a denial-of-service by writing malformed data to certain gRPC endpoints. This flaw has been...
CVE-2025-67780
SpaceX Starlink Dish devices with firmware 2024.12.04.mr46620 e.g., on Mini1prod2 allow administrative actions via unauthenticated LAN gRPC requests, aka MARMALADE 2. The cross-origin policy can be bypassed by omitting a Referer header. In some cases, an attacker's ability to read tilt, rotation,...
CVE-2025-61727 vulnerabilities
Vulnerabilities for packages: nri-rabbitmq, nri-couchbase, php-fpmexporter, kiali, prometheus-adapter, terraform-provider-azuread, nfpm, mesosphere-vsphere-csi, sftpgo-plugin-eventsearch, k8sgpt, kubernetes-replicator, spire-controller-manager, frp, kube-fluentd-operator, cert-manager-webhook-pdn...
GHSA-5MH9-3JWC-RP59 vulnerabilities
Vulnerabilities for packages: nri-rabbitmq, nri-couchbase, php-fpmexporter, kiali, prometheus-adapter, terraform-provider-azuread, nfpm, mesosphere-vsphere-csi, sftpgo-plugin-eventsearch, k8sgpt, kubernetes-replicator, spire-controller-manager, frp, kube-fluentd-operator, cert-manager-webhook-pdn...
org.webjars.npm:adal-node (=0.1.28), org.webjars.npm:azure__msal-node (=1.5.0) +7 more potentially affected by CVE-2025-65945 via org.webjars.npm:jws (>=3.2.2 <=4.0.0)
org.webjars.npm:jws MAVEN version =3.2.2, =1.6.1, =2.3.2, =5.5.4, =0.0.1, =1.0.0 Source cves: CVE-2025-65945 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-14188254...
Spring gRPC Next Steps for 1.0.0
This is a new blog post in the Road to GA series, this time updating everyone on the plans to integrate Spring gRPC with Spring Boot 4. The original plan was to move the autoconfiguration from Spring gRPC into Spring Boot in time for the 4.0 release. Unfortunately we haven't been able to find the...
EUVD-2018-9206
Malware in sbrugna...
EUVD-2017-12993
Malware in sbrugna...
EUVD-2021-1152
Malware in sbrugna...
EUVD-2021-18260
Malware in sbrugna...
EUVD-2017-16836
Malware in sbrugna...
EUVD-2017-16835
Malware in sbrugna...
EUVD-2017-18366
Malware in sbrugna...
EUVD-2017-0058
Malware in sbrugna...
EUVD-2017-15653
Malware in sbrugna...
EUVD-2021-15339
Malware in sbrugna...
EUVD-2019-10268
Malware in sbrugna...