CVE-2026-23901 vulnerabilities

Vulnerabilities for packages: neo4j, apache-jena-fuseki...

CVE-2026-23901 vulnerabilities

Vulnerabilities for packages: neo4j...

ca.ibodrov.concord:testcontainers-concord (>=0.0.2, <=0.0.20), ca.ibodrov.concord:testcontainers-concord-core (>=0.0.21, <=0.0.41) +144 more potentially affected by CVE-2026-23901 via org.apache.shiro:shiro-core (1.5.1)

org.apache.shiro:shiro-core MAVEN version 1.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-core and may be impacted: - ca.ibodrov.concord:testcontainers-concord =0.0.2, =0.0.21, =0.0.1, =1.0.0, =2.0.5, =2.0.9, =2.0.9, =2.0.5...

com.abasecode.opencode:abasecode-base-token (>=1.0.0, <=1.0.3), com.bazaarvoice.emodb:emodb-auth-core (>=6.5.24, <=6.5.27) +312 more potentially affected by CVE-2026-23901 via org.apache.shiro:shiro-core (1.9.1)

org.apache.shiro:shiro-core MAVEN version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-core and may be impacted: - com.abasecode.opencode:abasecode-base-token =1.0.0, =6.5.24, =6.5.24, =6.5.24, =6.5.24, =6.5.24, =2.0.0,...

com.diboot:diboot-file-spring-boot-starter (2.6.0), com.diboot:diboot-iam-spring-boot-starter (2.6.0) +155 more potentially affected by CVE-2026-23901 via org.apache.shiro:shiro-core (1.9.0)

org.apache.shiro:shiro-core MAVEN version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.shiro:shiro-core and may be impacted: - com.diboot:diboot-file-spring-boot-starter 2.6.0 - com.diboot:diboot-iam-spring-boot-starter 2.6.0 -...

DEBIAN-CVE-2026-23901

Observable Timing Discrepancy vulnerability in Apache Shiro. This issue affects Apache Shiro: from 1., 2. before 2.0.7. Users are recommended to upgrade to version 2.0.7 or later, which fixes the issue. Prior to Shiro 2.0.7, code paths for non-existent vs. existing users are different enough, tha...

Linux Distros Unpatched Vulnerability : CVE-2026-23901

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Observable Timing Discrepancy vulnerability in Apache Shiro. This issue affects Apache Shiro: from 1., 2. before 2.0.7. Users are recommended to upgrade to...

CVE-2026-23901

creationtimestamp| type| source ---|---|--- 2026-02-08 15:49:47+00:00| seen| https://seclists.org/oss-sec/2026/q1/149 2026-02-08 17:19:50+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3meegxgqjfm2s 2026-02-10 19:10:07+00:00| seen|...

CVE-2022-23901

A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/deadrules.cc...

CVE-2024-23901

Jenkins GitLab Branch Source Plugin 684.veafa7c1e2fe3 and earlier unconditionally discovers projects that are shared with the configured owner group, allowing attackers to configure and share a project, resulting in a crafted Pipeline being built by Jenkins during the next scan of the group...

CVE-2021-23901

An XML external entity XXE injection vulnerability was discovered in the Nutch DmozParser and is known to affect Nutch versions 1.18. XML external entity injection also known as XXE is a web security vulnerability that allows an attacker to interfere with an application's processing of XML data. ...

Linux Distros Unpatched Vulnerability : CVE-2022-23901

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack overflow re2c 2.2 exists due to infinite recursion issues in src/dfa/deadrules.cc. CVE-2022-23901 Note that Nessus relies on the presence of the package...

CVE-2022-23901 affecting package re2c for versions less than 3.1-4

CVE-2022-23901 affecting package re2c for versions less than 3.1-4. An upgraded version of the package is available that resolves this issue...

CVE-2025-23901

Cross-Site Request Forgery CSRF vulnerability in cybio GravatarLocalCache gravatarlocalcache allows Cross Site Request Forgery.This issue affects GravatarLocalCache: from n/a through = 1.1.2...

CVE-2025-23901

Cross-Site Request Forgery CSRF vulnerability in cybio GravatarLocalCache gravatarlocalcache allows Cross Site Request Forgery.This issue affects GravatarLocalCache: from n/a through = 1.1.2...

CVE-2025-23901 WordPress GravatarLocalCache plugin <= 1.1.2 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in cybio GravatarLocalCache gravatarlocalcache allows Cross Site Request Forgery.This issue affects GravatarLocalCache: from n/a through = 1.1.2...

Advisory ROSA-SA-2024-2536

software: re2c 3.1 AXIS: ROSA-CHROME packageevrstring: re2c-3.1-1 CVE-ID: CVE-2022-23901 BDU-ID: None CVE-Crit: CRITICAL. CVE-DESC.: The re2c 2.2 stack overflow is due to infinite recursion issues in src/dfa/deadrules.cc. CVE-STATUS: Fixed CVE-REV: To close, run the command: sudo dnf update re2c...

CVE-2024-23901

creationtimestamp| type| source ---|---|--- 2024-01-24 19:27:07+00:00| seen| https://t.me/ctinow/173034 2024-02-18 09:36:16+00:00| seen| https://t.me/ctinow/187198...

CVE-2024-23901

Jenkins GitLab Branch Source Plugin 684.veafa7c1e2fe3 and earlier unconditionally discovers projects that are shared with the configured owner group, allowing attackers to configure and share a project, resulting in a crafted Pipeline being built by Jenkins during the next scan of the group...

CVE-2024-23901

The CVE concerns Jenkins GitLab Branch Source Plugin versions 684.vea_fa_7c1e2fe3 and earlier. The vulnerability is that the plugin unconditionally discovers projects shared with the configured owner group, enabling attackers to configure and share a project, which can cause Jenkins to build a cr...