CVE-2026-64606

Deserialization of untrusted data vulnerability that may allow class-registration checks to be bypassed during Java lambda deserialization. Only lambda capture class is affected This issue affects Apache Fory: from before 1.4.0. Users are recommended to upgrade to version 1.4.0, which fixes the...

CVE-2026-64606

Deserialization of untrusted data vulnerability that may allow class-registration checks to be bypassed during Java lambda deserialization. Only lambda capture class is affected This issue affects Apache Fory: from before 1.4.0. Users are recommended to upgrade to version 1.4.0, which fixes the...

CVE-2026-64606: Deserialization of Untrusted Data

Deserialization of untrusted data vulnerability that may allow class-registration checks to be bypassed during Java lambda deserialization. Only lambda capture class is affected This issue affects Apache Fory: from before 1.4.0. Users are recommended to upgrade to version 1.4.0, which fixes the...

com.lightstep.opentelemetry:opentelemetry-launcher (>=0.17.0, <=0.17.1), com.signalfx.public:otel-java-lambda-wrapper (0.0.4) +1 more potentially affected by CVE-2026-45292 via io.opentelemetry:opentelemetry-extension-trace-propagators (0.17.1)

io.opentelemetry:opentelemetry-extension-trace-propagators MAVEN version 0.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.opentelemetry:opentelemetry-extension-trace-propagators and may be impacted: -...