Fedora 43 : antlr4-project (2026-d9ca28a7b8)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d9ca28a7b8 advisory. This update contains a fix for CVE-2026-13503. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that...

CVE-2026-13503

creationtimestamp| type| source ---|---|--- 2026-06-28 18:01:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpekk4wyxx2j 2026-06-28 19:29:16+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mpephrd24x2m 2026-06-29 14:50:49+00:00| seen|...

DEBIAN-CVE-2026-13503

A vulnerability was detected in antlr ANTLR4 up to 4.13.2. Affected by this issue is the function getImportedVocabFile of the file tool/src/org/antlr/v4/parse/TokenVocabParser.java of the component tokenVocab Grammar Option Handler. The manipulation results in path traversal. The attack can be...

UBUNTU-CVE-2026-13503

A vulnerability was detected in antlr ANTLR4 up to 4.13.2. Affected by this issue is the function getImportedVocabFile of the file tool/src/org/antlr/v4/parse/TokenVocabParser.java of the component tokenVocab Grammar Option Handler. The manipulation results in path traversal. The attack can be...