ROOT-APP-MAVEN-CVE-2024-7254 CVE-2024-7254 in com.google.protobuf:protobuf-java - Patched by Root

Root has patched CVE-2024-7254 in the com.google.protobuf:protobuf-java package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2022-3510 CVE-2022-3510 in com.google.protobuf:protobuf-java - Patched by Root

Root has patched CVE-2022-3510 in the com.google.protobuf:protobuf-java package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2022-3509 CVE-2022-3509 in com.google.protobuf:protobuf-java - Patched by Root

Root has patched CVE-2022-3509 in the com.google.protobuf:protobuf-java package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2021-22570 CVE-2021-22570 in com.google.protobuf:protobuf-java - Patched by Root

Root has patched CVE-2021-22570 in the com.google.protobuf:protobuf-java package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2021-22569 CVE-2021-22569 in com.google.protobuf:protobuf-java - Patched by Root

Root has patched CVE-2021-22569 in the com.google.protobuf:protobuf-java package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2022-3171 CVE-2022-3171 in com.google.protobuf:protobuf-java - Patched by Root

Root has patched CVE-2022-3171 in the com.google.protobuf:protobuf-java package for Root:Maven. Multiple fixed versions available...

Malicious code in execute-java-short-cluster-bundle (npm)

Source: amazon-inspector e0078f37af1918262289019391ff05bf9d93d02c69489efe7d3c4cd18bc998f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in enum-beta-java-double-encrypt (npm)

The package enum-beta-java-double-encrypt was found to contain malicious code. --- Credit: OpenSSF source...

Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop

Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings.This issue affects Apache Thrift: before 0.24.0.Users are recommended to upgrade to version 0.24.0, which fixes the issue...

CVE-2026-87877

A flaw was found in zstd-jni. An attacker could exploit a use-after-free vulnerability by calling specific methods on closed streams without proper validation. This could lead to memory corruption, potentially allowing the attacker to corrupt unrelated objects or cause the Java Virtual Machine JV...

CVE-2026-57822

A flaw was found in Apache ActiveMQ Artemis. The JsonUtil.fromJsonArray method uses ObjectInputStream.readObject to deserialize CompositeData from Base64-encoded serialized objects in management message bodies sent to the activemq.management address. While the deserialization is protected by an...

CVE-2026-57822

When the broker is processing message-based management requests, sent by an authenticated messaging client that is authorized with MANAGE permission to perform management-via-messaging, the parameter processing can trigger Java deserialization of certain method parameters that the broker will not...

CVE-2026-57822 Apache Artemis, Apache ActiveMQ Artemis: Message-based management parameter deserialization may lead to denial of service

When the broker is processing message-based management requests, sent by an authenticated messaging client that is authorized with MANAGE permission to perform management-via-messaging, the parameter processing can trigger Java deserialization of certain method parameters that the broker will not...

EUVD-2026-75247

When the broker is processing message-based management requests, sent by an authenticated messaging client that is authorized with MANAGE permission to perform management-via-messaging, the parameter processing can trigger Java deserialization of certain method parameters that the broker will not...

CVE-2026-57822 Apache Artemis, Apache ActiveMQ Artemis: Message-based management parameter deserialization may lead to denial of service

When the broker is processing message-based management requests, sent by an authenticated messaging client that is authorized with MANAGE permission to perform management-via-messaging, the parameter processing can trigger Java deserialization of certain method parameters that the broker will not...

CVE-2026-57822

Apache Artemis and Apache ActiveMQ Artemis are vulnerable to a Denial of Service (DoS) via unsafe Java deserialization. When the broker processes management requests from an authenticated client with MANAGE permissions, the JsonUtil.fromJsonArray() method uses ObjectInputStream.readObject() to de...

CVE-2026-57822

When the broker is processing message-based management requests, sent by an authenticated messaging client that is authorized with MANAGE permission to perform management-via-messaging, the parameter processing can trigger Java deserialization of certain method parameters that the broker will not...

ROOT-APP-MAVEN-CVE-2026-33701 CVE-2026-33701 in io.opentelemetry.javaagent:opentelemetry-javaagent - Patched by Root

Root has patched CVE-2026-33701 in the io.opentelemetry.javaagent:opentelemetry-javaagent package for Root:Maven. Multiple fixed versions available...

CLEANSTART-2026-AM39668 yawkat LZ4 Java provides LZ4 compression for Java

Multiple security vulnerabilities affect the apache-nifi package. yawkat LZ4 Java provides LZ4 compression for Java. See references for individual vulnerability details...

CLEANSTART-2026-HL20029 JLine is a Java library for handling console input

Multiple security vulnerabilities affect the kafka package. JLine is a Java library for handling console input. See references for individual vulnerability details...