IT-Sentinel

PUBLISHED

2026-03-30 16:16

MODIFIED

2026-03-30 16:16

EPSS (Prob. Exploit)

0.44%

Top 62.5%

DATA SOURCES:

> DESCRIPTION

The CrewAI CodeInterpreter tool falls back to SandboxPython when it cannot reach Docker, which can enable RCE through arbitrary C function calling.

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

GHSA-x2wq-9x2f-fhj7 MODERATE

Spring Security Core has a TOCTOU race condition when One-Time Token login with JdbcOneTimeTokenService is configured

AFFECTED PACKAGES:

MAVEN / org.springframework.security:spring-security-core

>= 6.4.0, <= 6.4.13

MAVEN / org.springframework.security:spring-security-core

>= 7.0.3, < 7.0.5

Fixed in: 7.0.5

MAVEN / org.springframework.security:spring-security-core

>= 6.5.0, < 6.5.10

Fixed in: 6.5.10

Première apparition

30/03/2026 16:16

Source: NVD

Total des modifications: 0 Dernière mise à jour: 7 months ago