EUVD-2026-50975

Spring Tools for Eclipse renders Spring Boot starter wizard dependency tooltips in a native embedded browser SWT Browser with JavaScript enabled. Using untrusted and compromised Initializr endpoints for the Spring Boot starter wizard can result in arbitrary script execution inside the embedded...

org.apache.cxf:cxf-eclipse-plugin (2.0.9) potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.0.9)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf:cxf-eclipse-plugin 2.0.9 Source cves: CVE-2026-50632 Source advisory:...

org.apache.camel:camel-example-cxf (1.4.0), org.apache.cxf:cxf-eclipse-plugin (2.1.1) potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.1.1)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf 1.4.0 - org.apache.cxf:cxf-eclipse-plugin 2.1.1 Sour...

org.apache.camel:camel-example-cxf (1.5.0), org.apache.cxf:cxf-eclipse-plugin (2.1.3) potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.1.3)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf 1.5.0 - org.apache.cxf:cxf-eclipse-plugin 2.1.3 Sour...

org.apache.cxf:cxf-eclipse-plugin (2.0.8) potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.0.8)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf:cxf-eclipse-plugin 2.0.8 Source cves: CVE-2026-50632 Source advisory:...

org.apache.cxf:cxf-eclipse-plugin (2.1.2), org.apache.servicemix.samples.cxf-wsdl-first:wsdl-first-cxf-sa (3.3) +1 more potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.1.2)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf:cxf-eclipse-plugin 2.1.2 -...

org.apache.cxf.systests:cxf-systests-transports (2.1.7), org.apache.cxf.systests:cxf-systests-uncategorized (2.1.7) +3 more potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.1.7)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-transports 2.1.7 -...

org.apache.cxf:apache-cxf (2.0.11), org.apache.cxf:cxf-distribution-manifest (2.0.11) +2 more potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.0.11)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf:apache-cxf 2.0.11 - org.apache.cxf:cxf-distribution-manifest 2.0.11 -...

org.apache.cxf.systests:cxf-systests-transports (2.1.10), org.apache.cxf.systests:cxf-systests-uncategorized (2.1.10) +3 more potentially affected by CVE-2026-50632 via org.apache.cxf:cxf-rt-transports-jms (2.1.10)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf.systests:cxf-systests-transports 2.1.10 -...

pgcodekeeper 安全漏洞

pgCodeKeeper is an open source Eclipse plugin for database schema management from pgCodeKeeper. A security vulnerability exists in pgcodekeeper version 10.12.0, which stems from storing passwords and usernames in clear text and could lead to the disclosure of sensitive information...

org.apache.cxf:apache-cxf (2.1.5), org.apache.cxf:cxf-distribution-manifest (2.1.5) +2 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.1.5)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf:apache-cxf 2.1.5 - org.apache.cxf:cxf-distribution-manifest 2.1.5 -...

org.apache.cxf:cxf-eclipse-plugin (2.0.7), org.apache.servicemix.samples.cxf-wsdl-first:wsdl-first-cxf-sa (3.2.2) +4 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.0.7)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf:cxf-eclipse-plugin 2.0.7 -...

org.apache.cxf:cxf-eclipse-plugin (2.0.9) potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.0.9)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.cxf:cxf-eclipse-plugin 2.0.9 Source cves: CVE-2025-48913 Source advisory:...

org.apache.camel:camel-example-cxf (>=1.6.0, <=2.0-m1), org.apache.cxf:apache-cxf (2.1.4) +8 more potentially affected by CVE-2025-48913 via org.apache.cxf:cxf-rt-transports-jms (2.1.4)

org.apache.cxf:cxf-rt-transports-jms MAVEN version 2.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-jms and may be impacted: - org.apache.camel:camel-example-cxf =1.6.0, =2.0-m1 - org.apache.cxf:apache-cxf 2.1.4 -...

org.apache.cxf:cxf-anttasks (2.1.1), org.apache.cxf:cxf-eclipse-plugin (2.1.1) +4 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.1.1)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.apache.cxf:cxf-anttasks 2.1.1 - org.apache.cxf:cxf-eclipse-plugin 2.1.1 -...

org.apache.cxf:apache-cxf (2.1.6), org.apache.cxf:cxf-anttasks (2.1.6) +6 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.1.6)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.apache.cxf:apache-cxf 2.1.6 - org.apache.cxf:cxf-anttasks 2.1.6 -...

org.apache.cxf:cxf-anttasks (2.1.3), org.apache.cxf:cxf-eclipse-plugin (2.1.3) +5 more potentially affected by CVE-2024-28752 via org.apache.cxf:cxf-rt-databinding-aegis (2.1.3)

org.apache.cxf:cxf-rt-databinding-aegis MAVEN version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-databinding-aegis and may be impacted: - org.apache.cxf:cxf-anttasks 2.1.3 - org.apache.cxf:cxf-eclipse-plugin 2.1.3 -...

GHSA-5R8J-QMCM-7G7Q Apache UIMA Java SDK Deserialization of Untrusted Data, Improper Input Validation vulnerability

Deserialization of Untrusted Data, Improper Input Validation vulnerability in Apache UIMA Java SDK. This issue affects Apache UIMA Java SDK before 3.5.0. Users are recommended to upgrade to version 3.5.0, which fixes the issue. There are several locations in the code where serialized Java objects...

com.google.code.maven-svn-wagon:maven-svn-wagon (>=1.1, <=1.4), jp.pizzafactory.maven:s3-maven-wagon (3.3) +42 more potentially affected by CVE-2022-4244 via org.codehaus.plexus:plexus-utils (1.4.2)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - com.google.code.maven-svn-wagon:maven-svn-wagon =1.1, =3.2, =1.1.1, =1.0-alpha-2, =1.0-beta-3,...

org.apache.cxf:apache-cxf (2.0.12), org.apache.cxf:cxf-distribution-manifest (2.0.12) +7 more potentially affected by CVE-2018-8039 via org.apache.cxf:cxf-rt-transports-http (2.0.12)

org.apache.cxf:cxf-rt-transports-http MAVEN version 2.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-transports-http and may be impacted: - org.apache.cxf:apache-cxf 2.0.12 - org.apache.cxf:cxf-distribution-manifest 2.0.12 -...