CVE-2026-64678

The NOsql Object (NO2) database, also known as Nitrite , is vulnerable to unfiltered Java deserialization in the legacy v1 database migration path prior to version 4.4.1 . When opening a database file, the MVStoreUtils.openOrCreate() method triggers an automatic migration that passes raw bytes to...