68866 matches found
PT-2026-122308
Security vulnerability affects the openjdk11 package. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: JSSE...
PT-2026-122342
Security vulnerability affects the openjdk11 package. Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot...
PT-2026-122309
Security vulnerability affects the openjdk11 package. Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE...
PT-2026-122295
Security vulnerability affects the openjdk11 package. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Networking...
PT-2026-122385
Security vulnerability affects the solr package. snappy-java through 1...
ai.expert:nlapi-java-sdk (>=2.6.1, <=2.7.0), ai.jokkoo:jokkoo-server (>=0.1.0, <=1.3.7) +1942 more potentially affected by CVE-2026-85473 via com.auth0:java-jwt (>=4.0.0, <=4.6.1)
com.auth0:java-jwt MAVEN version =4.0.0, =2.6.1, =0.1.0, =0.1.3, =0.1.0, =0.0.0.2-alpha, =0.1.0, =0.1.0-alpha, =5.3.1, =9.2.0, =7.2.0, =9.2.0, =1.1.4.2, =1.1.5 - br.com.sdkopen:security 1.0.0 and more Source cves: CVE-2026-85473 Source advisory: SNYK:JAVA-COMAUTH0-20937619...
Improper Handling of Exceptional Conditions
Overview Affected versions of this package are vulnerable to Improper Handling of Exceptional Conditions via the token parsing process. An attacker can cause the service to terminate threads and degrade availability by submitting JWTs with timestamp claims containing out-of-range values...
CVE-2026-85473
The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim exp, nbf, iat containing an out-of-range value. The condition occurs during token parsing, prior to signature verification. Repeated requests of this nature may lead to degraded availability of the...
CVE-2026-85473
The auth0/java-jwt library is vulnerable to a flaw where it may terminate a thread upon receiving a JSON Web Token (JWT) containing an out-of-range value in timestamp claims such as exp , nbf , or iat . This issue occurs during the token parsing phase, specifically before signature verification t...
CVE-2026-85473 Out-of-Range Timestamp Claim Handling in auth0/java-jwt
The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim exp, nbf, iat containing an out-of-range value. The condition occurs during token parsing, prior to signature verification. Repeated requests of this nature may lead to degraded availability of the...
EUVD-2026-100486
The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim exp, nbf, iat containing an out-of-range value. The condition occurs during token parsing, prior to signature verification. Repeated requests of this nature may lead to degraded availability of the...
CVE-2026-85473 Out-of-Range Timestamp Claim Handling in auth0/java-jwt
The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim exp, nbf, iat containing an out-of-range value. The condition occurs during token parsing, prior to signature verification. Repeated requests of this nature may lead to degraded availability of the...
cn.net.autocode:autocode-core (1.2.8), cn.net.autocode:autocode-platform (>=2.6.3, <=2.6.6) +335 more potentially affected by CVE-2026-85473 via com.auth0:java-jwt (>=4.6.0, <=4.6.1)
com.auth0:java-jwt MAVEN version =4.6.0, =2.6.3, =5.8.0, =1.3.6, =1.4.2 - com.codeheadsystems:hofmann-dropwizard 3.0.0 - com.codeheadsystems:hofmann-server 3.0.0 - com.codeheadsystems:hofmann-springboot 3.0.0 - com.fonrouge.fslib:fullstack-jvm 6.4.0 - com.fonrouge.fslib:media-jvm 6.4.0 -...
CVE-2026-85473
The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim exp, nbf, iat containing an out-of-range value. The condition occurs during token parsing, prior to signature verification. Repeated requests of this nature may lead to degraded availability of the...
CVE-2026-54086
SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the ISP1 PDU handling path decodes an attacker-controlled body length and allocates a byte array without an upper bound, while malformed or truncated input can also terminate reads unexpectedly, allowing...
RHLW-2026-9FA472B9239A3A7E Lightwell Security Advisory: avro-compiler 1.9.2.rhlw-00002
Red Hat Lightwell has released org.apache.avro:avro-compiler 1.9.2.rhlw-00002 with a backported security fix. CVE-2025-33042: Apache Avro Java SDK: Code injection on Java generated code This patched artifact is a drop-in replacement for org.apache.avro:avro-compiler 1.9.2 from Maven Central...
CVE-2026-54086 SLE API for Java: Uncontrolled Memory Allocation / handled exception leading to Denial of Service
SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the ISP1 PDU handling path decodes an attacker-controlled body length and allocates a byte array without an upper bound, while malformed or truncated input can also terminate reads unexpectedly, allowing...
CVE-2026-54086
The SLE API for Java (an implementation of CCSDS Space Link Extension Services) is vulnerable to a Denial of Service attack in versions prior to 5.1.7 . The flaw exists in the ISP1 PDU handling path , where the application decodes an attacker-controlled body length and allocates a byte array with...
EUVD-2026-99227
SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the ISP1 PDU handling path decodes an attacker-controlled body length and allocates a byte array without an upper bound, while malformed or truncated input can also terminate reads unexpectedly, allowing...
CVE-2026-54086
SLE API for Java is an implementation of CCSDS Space Link Extension Services. Prior to 5.1.7, the ISP1 PDU handling path decodes an attacker-controlled body length and allocates a byte array without an upper bound, while malformed or truncated input can also terminate reads unexpectedly, allowing...