CVE-2026-108087

UNSUPPORTED WHEN ASSIGNED Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. Missing input sanitation would allow arbitrary SQL injection through the SQL processor or sql:/esql:...

CVE-2026-108087 Apache Cocoon: SQL Injection

UNSUPPORTED WHEN ASSIGNED Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. Missing input sanitation would allow arbitrary SQL injection through the SQL processor or sql:/esql:...

CVE-2026-108087

UNSUPPORTED WHEN ASSIGNED Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. Missing input sanitation would allow arbitrary SQL injection through the SQL processor or sql:/esql:...

EUVD-2026-104912

UNSUPPORTED WHEN ASSIGNED Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. Missing input sanitation would allow arbitrary SQL injection through the SQL processor or sql:/esql:...

CVE-2026-108087

The Apache Cocoon project (all versions) is susceptible to an SQL injection vulnerability due to missing input sanitation. This flaw allows for arbitrary SQL injection via the SQL processor or sql:/esql: logicsheets . Because the project is retired, the maintainer does not plan to release a fix. ...

CVE-2026-108087 Apache Cocoon: SQL Injection

UNSUPPORTED WHEN ASSIGNED Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. Missing input sanitation would allow arbitrary SQL injection through the SQL processor or sql:/esql:...

PT-2026-118325

UNSUPPORTED WHEN ASSIGNED Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. Missing input sanitation would allow arbitrary SQL injection through the SQL processor or sql:/esql:...

Apache Cocoon SQL injection vulnerability

SQL injection vulnerabilities exist in all versions of Apache Cocoon. These vulnerabilities stem from improper input sanitization and may allow arbitrary SQL injection via the SQL processor or sql:/esql: logicsheets...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.4), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.4) +4 more potentially affected by CVE-2026-103005 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.4)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.4 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.5.3 Source cves: CVE-2026-103005 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-20937061...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.1), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.1) +3 more potentially affected by CVE-2026-103006 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.1)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.1 Source cves: CVE-2026-103006 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-20937065...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.4), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.4) +4 more potentially affected by CVE-2026-103008 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.4)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.4 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.5.3 Source cves: CVE-2026-103008 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-20937077...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.3), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.3) +4 more potentially affected by CVE-2026-103007 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.3)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.3 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.5.3 Source cves: CVE-2026-103007 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-20937074...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.4), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.4) +4 more potentially affected by CVE-2026-102409 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.4)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.4 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.5.3 Source cves: CVE-2026-102409 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-20937078...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.4), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.4) +4 more potentially affected by CVE-2026-102404 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.4)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.4 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.5.3 Source cves: CVE-2026-102404 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-20937080...

org.elasticsearch.plugin:x-pack-esql (>=9.4.0, <=9.4.3), org.elasticsearch.plugin:x-pack-esql-compute (>=9.4.0, <=9.4.3) +4 more potentially affected by CVE-2026-102407 via org.elasticsearch:elasticsearch (>=9.4.0, <=9.4.3)

org.elasticsearch:elasticsearch MAVEN version =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.3 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.4.2 Source cves: CVE-2026-102407 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-20937083...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.4), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.4) +4 more potentially affected by CVE-2026-102408 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.4)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.4 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.5.3 Source cves: CVE-2026-102408 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-20937150...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.2), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.2) +3 more potentially affected by CVE-2026-102411 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.2)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.2 Source cves: CVE-2026-102411 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-20937400...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.4), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.4) +4 more potentially affected by CVE-2026-103009 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.4)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.4 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.5.3 Source cves: CVE-2026-103009 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-21243632...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.1), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.1) +3 more potentially affected by CVE-2026-103006 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.1)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.1 Source cves: CVE-2026-103006 Source advisory: MEND:CVE-2026-103006...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.2), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.2) +3 more potentially affected by CVE-2026-102411 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.2)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.2 Source cves: CVE-2026-102411 Source advisory: MEND:CVE-2026-102411...