Astra Linux – Vulnerability in openjdk-11

A vulnerability exists in the Oracle Java SE and Oracle GraalVM Enterprise Edition products developed by Oracle Java SE component: Hotspot. The versions affected include Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. This easily exploitable...

Astra Linux – vulnerability in openjdk-11

Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition components of Oracle Java SE component: 2D. Affected versions include Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7, and 24.0.1; and Oracle...

EUVD-2026-102153

Sonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a Java class loading call through an ExtDirect endpoint. This allows the attacker to learn whether specific classes are present in the application. The issue does not by itself allow code...

CVE-2026-97666 Nexus Repository 3 - Unsafe Reflection in ExtDirect Repository Endpoint

Sonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a Java class loading call through an ExtDirect endpoint. This allows the attacker to learn whether specific classes are present in the application. The issue does not by itself allow code...

CVE-2026-97666

Sonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a Java class loading call through an ExtDirect endpoint. This allows the attacker to learn whether specific classes are present in the application. The issue does not by itself allow code...

ai.djl/api: Integer overflow in tensor buffer validation in Deep Java Library

A flaw was found in Deep Java Library. Due to an integer overflow during tensor buffer validation, a remote, unauthenticated attacker can send a crafted tensor payload to trigger out-of-bounds memory access. Successful exploitation can allow an attacker to obtain sensitive data from adjacent...

com.google.appengine:appengine-java-sdk (>=5.0.0, <=5.2.0-beta), com.google.appengine:jetty121-assembly (>=3.0.0-beta, <=5.2.0-beta) +3 more potentially affected by CVE-2026-19863 via org.eclipse.jetty:jetty-ethereum (>=12.1.0.alpha0, <=12.1.12)

org.eclipse.jetty:jetty-ethereum MAVEN version =12.1.0.alpha0, =5.0.0, =3.0.0-beta, =12.1.0.alpha0, =12.1.0.alpha0, =0.3.1, =0.4.0 Source cves: CVE-2026-19863 Source advisory: SNYK:JAVA-ORGECLIPSEJETTY-21243549...

CVE-2026-102554

A flaw was found in Google Guava. During Java object deserialization—the process of converting stored data back into active program objects—memory is eagerly allocated based on caller-specified size parameters without proper throttling or limits. An attacker can exploit this issue by providing a...

Security Bulletin: Multiple vulnerabilities in IBM Tivoli Network Manager IP Edition

Summary Multiple vulnerabilities were addressed in IBM Tivoli Network Manager IP Edition 4.2.0.25 IF1 Vulnerability Details CVEID:CVE-2026-108104 DESCRIPTION: Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled...

com.google.appengine:appengine-java-sdk (>=5.0.0, <=5.2.0-beta), com.google.appengine:jetty121-assembly (>=3.0.0-beta, <=5.2.0-beta) +3 more potentially affected by CVE-2026-19863 via org.eclipse.jetty:jetty-ethereum (>=12.1.0, <=12.1.12)

org.eclipse.jetty:jetty-ethereum MAVEN version =12.1.0, =5.0.0, =3.0.0-beta, =12.1.0, =12.1.0, =0.3.1, =0.4.0 Source cves: CVE-2026-19863 Source advisory: MEND:CVE-2026-19863...

EUVD-2026-101960

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the Vert.x DB2 client vertx-db2-client contains DRDA protocol handling code that deserializes User Defined Type UDT column data using a bare ObjectInputStream.readObject call with no ObjectInputFilter or clas...

CVE-2026-102469

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the Vert.x DB2 client vertx-db2-client contains DRDA protocol handling code that deserializes User Defined Type UDT column data using a bare ObjectInputStream.readObject call with no ObjectInputFilter or clas...

Security Bulletin: Multiple vulnerabilities in IBM Tivoli Network Manager IP Edition

Summary Multiple vulnerabilities were addressed in IBM Tivoli Network Manager IP Edition 4.2.0.25 IF1 Vulnerability Details CVEID:CVE-2026-17508 DESCRIPTION: In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with cost parameters taken from the...

Security update for the Java stack

This update for Java fixes the following issues: This update introduces new libraries and refines existing Java tools to improve security, compatibility, stability, and formatting. ant Updated to version 1.10.18: Security issues fixed: CVE-2021-36374: Fixed excessive memory allocation when readin...

SUSE-SU-2026:4677-1 Security update for the Java stack

This update for Java fixes the following issues: This update introduces new libraries and refines existing Java tools to improve security, compatibility, stability, and formatting. ant Updated to version 1.10.18: - Security issues fixed: - CVE-2021-36374: Fixed excessive memory allocation when...

Vulnerability in Cosminexus

Overview Cosminexus Developer's Kit for JavaTM and Hitachi Developer's Kit for Java contain the vulnerability. This vulnerability exists in Cosminexus Developer's Kit for JavaTM and Hitachi Developer's Kit for Java which are components of other Hitachi products. Impact Regarding the impact of the...

Multiple Vulnerabilities in Cosminexus

Overview Cosminexus Developer's Kit for JavaTM and Hitachi Developer's Kit for Java contain the vulnerabilities. The vulnerabilities exist in Cosminexus Developer's Kit for JavaTM and Hitachi Developer's Kit for Java which are components of other Hitachi products. Impact Regarding the impact of t...

Multiple Vulnerabilities in Cosminexus

Overview Cosminexus Developer's Kit for JavaTM and Hitachi Developer's Kit for Java contain the vulnerabilities. The vulnerabilities exist in Cosminexus Developer's Kit for JavaTM and Hitachi Developer's Kit for Java which are components of other Hitachi products. Impact Regarding the impact of t...

CLEANSTART-2026-OH67049 RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes

Security vulnerability affects the wso2mi package. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes...

CLEANSTART-2026-TG95490 RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes

Security vulnerability affects the wso2mi package. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes...