https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 10:29:15 +0000 https://vulnerability.circl.lu/vuln/cve-2026-104714 <p><strong>Affected:</strong> Apache Software Foundation Apache Struts</p> <p>Concurrent execution using shared resource with improper synchronization (&#39;race condition&#39;) vulnerability in Apache Struts. Where a localized message formats a date or time argument, the formatter retained for that message by the application-wide text provider is used by concurrently served requests without isolation, so a value belonging to one user can appear in another user&#39;s response, or the rendering can fail and surface as a server error. Applications whose localized messages format no date or time arguments are not affected.</p> <p>This issue affects Apache Struts: from 2.0.0 through 2.3.37, from 2.5.0 through 2.5.33, from 6.0.0 through 6.11.0, from 7.0.0 through 7.3.0.</p> <p>Users are recommended to upgrade to version 6.12.0 or 7.4.0, which fixes the issue.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Struts</p> <p>Concurrent execution using shared resource with improper synchronization (&#39;race condition&#39;) vulnerability in Apache Struts. Where a localized message formats a date or time argument, the formatter retained for that message by the application-wide text provider is used by concurrently served requests without isolation, so a value belonging to one user can appear in another user&#39;s response, or the rendering can fail and surface as a server error. Applications whose localized messages format no date or time arguments are not affected.</p> <p>This issue affects Apache Struts: from 2.0.0 through 2.3.37, from 2.5.0 through 2.5.33, from 6.0.0 through 6.11.0, from 7.0.0 through 7.3.0.</p> <p>Users are recommended to upgrade to version 6.12.0 or 7.4.0, which fixes the issue.</p> https://vulnerability.circl.lu/vuln/cve-2026-104714