CVE-2026-54734

Prebid Server Java is the Java version of Prebid Server. Prior to 3.43.0, certain bidder adapters interpolate user-supplied parameters into outbound request URLs without using HttpUtil to validate the resulting domain or path segment. A malicious actor who can supply bid-request parameters can...

RHLW-2026-EAA1BBE31B9D0CC3 Lightwell Security Advisory: jsoup 1.7.2.rhlw-00001

Red Hat Lightwell has released org.jsoup:jsoup 1.7.2.rhlw-00001 with backported fixes for CVE-2015-6748 and CVE-2021-37714. CVE-2015-6748: Cross-site scripting XSS vulnerability in jsoup before 1.8.3. CVE-2021-37714: jsoup is a Java library for working with HTML. Those using jsoup versions prior ...

Security Bulletin: Multiple vulnerabilities in IBM® SDK Java™ Technology Edition shipped with IBM Tivoli Monitoring.

Summary Multiple vulnerabilities in IBM® SDK Java™ Technology Edition that is shipped as part of multiple IBM Tivoli Monitoring ITM components. CVE-2026-61308, CVE-2026-70907 and CVE-2026-60589. Vulnerability Details CVEID:CVE-2026-61308 DESCRIPTION: Difficult to exploit vulnerability allows...

Security Bulletin: DEV-EXT - tomcat-embed-core-10.1.57.jar (Publicly disclosed vulnerability found by Scanner)

Summary Multiple vulnerabilities reported in tomcat-embed-core-10.1.57.jar detected by Mend scanner in db2-service-java/pom.xml. The affected version 10.1.57 is vulnerable to 9 CVEs covering improper access control, authentication bypass, TOCTOU race condition, improper authorization, improper...

com.akamai.edgegrid:edgegrid-signer-async-http-client (>=6.0.1-rc.1, <=6.0.5), com.arpnetworking.metrics:mad-experimental (>=1.2.3, <=1.2.11) +105 more potentially affected by CVE-2026-85720 via org.asynchttpclient:async-http-client (>=3.0.0.beta1, <=3.0.11)

org.asynchttpclient:async-http-client MAVEN version =3.0.0.beta1, =6.0.1-rc.1, =1.2.3, =1.22.2, =1.13.6, =1.1.0, =0.4.7, =0.4.7, =0.4.7, =1.17.0, =1.17.0, =1.17.0, =0.5.0, =0.0.9, =0.0.11 and more Source cves: CVE-2026-85720 Source advisory: SNYK:JAVA-ORGASYNCHTTPCLIENT-19963948...

Improper Handling of Highly Compressed Data (Data Amplification)

Overview org.asynchttpclient:async-http-client is a maven plugin for the Async Http Client AHC classes. Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification through ChannelManager.newHttpContentDecompressor in...

DEBIAN-CVE-2026-85720

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, a request using an HTTP proxy to reach an HTTPS origin can expose preemptive origin credentials because NettyRequestFactory and...

UBUNTU-CVE-2026-85716

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 3.0.8 until 3.0.12, processScramAuthenticationInfo and processAuthenticationInfo compute the SCRAM ServerSignature or Digest rspauth verification result but log...

CVE-2026-54677 Scoold: Authenticated user can post replies and comments to private-space questions without space membership

Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.0, authenticated users who are not members of a private space can create content in questions belonging to that space because src/main/java/com/erudika/scoold/controllers/QuestionController.java in QuestionController.reply...

EUVD-2026-82337

Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.0, authenticated users who are not members of a private space can create content in questions belonging to that space because src/main/java/com/erudika/scoold/controllers/QuestionController.java in QuestionController.reply...

SUSE CVE-2026-75516

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.34.0, AMQConnection.start applies Math.minmaxInboundMessageBodySize, frameMax after Connection.Tune negotiation even though AMQP defines frameMax value zero as...

Junrar: LocalFolderExtractor mkdir escape allows directory creation outside extraction root

Summary LocalFolderExtractor validates only the final canonical file path before extraction. However, makeFile creates intermediate directories one path segment at a time without checking whether each created directory remains inside the destination folder. A malicious RAR entry can make the fina...

EUVD-2026-81011

Junrar: LocalFolderExtractor mkdir escape allows directory creation outside extraction root...

Directory Traversal

Overview com.github.junrar:junrar is a rar decompression library in plain java. Affected versions of this package are vulnerable to Directory Traversal due to unchecked intermediate directory creation in LocalFolderExtractor’s makeFile path handling. An attacker can create directories outside the...

com.hortonworks.registries:storage-tool (>=0.1.0, <=0.3.1), com.rocketfuel.sdbc:mariadb-jdbc_2.11 (2.0.1) +6 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.5.5)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.hortonworks.registries:storage-tool =0.1.0, =2.0, =1.19.0, =1.0, =1.0, =1.7.17 Sour...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=3.5.0, <=3.8.0), com.tmsps:ne4spring (>=1.6.6, <=999.0.0.0) potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.5.2)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =3.5.0, =1.6.6, =999.0.0.0 Source cves: CVE-2026-617...

com.stratio.crossdata.connector:crossdata-cassandra (>=1.0.0, <=1.2.2), com.stratio.crossdata.connector:crossdata-cassandra_2.10 (>=1.3.0, <=1.5.0) +43 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.2.3)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.stratio.crossdata.connector:crossdata-cassandra =1.0.0, =1.3.0, =1.3.0, =1.0.0,...

io.zipkin.dependencies:zipkin-dependencies (1.6.1), io.zipkin.dependencies:zipkin-dependencies-mysql (1.6.1) potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.6.2)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.zipkin.dependencies:zipkin-dependencies 1.6.1 -...

org.codefilarete.stalactite:core-mariadb-adapter (1.0.0), org.codefilarete.stalactite:sql-mariadb-adapter (1.0.0) +5 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.3.4)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - org.codefilarete.stalactite:core-mariadb-adapter 1.0.0 -...

bayern.steinbrecher:dbconnector (>=0.10, <=0.15), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=4.0.0, <=5.7.9) +519 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (>=2.0.1, <=2.7.13)

org.mariadb.jdbc:mariadb-java-client MAVEN version =2.0.1, =0.10, =4.0.0, =5.6.5, =1.0.0, =1.0.0, =2.4.0, =0.3.5, =1.1.0, =1.1.0, =1.0.2, =1.0.0, =2.10.6.9, =2.0.0, =2.2.0 and more Source cves: CVE-2026-61700 Source advisory: SNYK:JAVA-ORGMARIADBJDBC-19964085...