CVE-2026-86512

A vulnerability was identified in java-json-tools json-patch up to 1.13. This affects the function CopyOperation.apply/MoveOperation.apply of the file src/main/java/com/github/fge/jsonpatch/CopyOperation.java of the component Copy Move Operations. The manipulation leads to improper access control...

CVE-2026-86512

CVE-2026-86512 affects java-json-tools json-patch versions up to 1.13 , specifically the CopyOperation.apply and MoveOperation.apply functions in the file src/main/java/com/github/fge/jsonpatch/CopyOperation.java (Copy Move Operations component). The root cause is improper access controls , enabl...

CVE-2026-86512 java-json-tools json-patch Copy Move Operations CopyOperation.java MoveOperation.apply access control

A vulnerability was identified in java-json-tools json-patch up to 1.13. This affects the function CopyOperation.apply/MoveOperation.apply of the file src/main/java/com/github/fge/jsonpatch/CopyOperation.java of the component Copy Move Operations. The manipulation leads to improper access control...

CVE-2026-86511

A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this vulnerability is the function BigDecimal.toPlainString of the file src/main/java/com/github/fge/jackson/JacksonUtils.java. Performing a manipulation results in resource consumption. The attack may be initiated...

ysoserial

A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization...

CLEANSTART-2026-FR63847 yawkat LZ4 Java provides LZ4 compression for Java

Multiple security vulnerabilities affect the elasticsearch package. yawkat LZ4 Java provides LZ4 compression for Java. See references for individual vulnerability details...

EUVD-2026-72577

SAP GUI for Java does not correctly enforce the trust level policy for certain functions invoked from a connected backend system. A low-privileged attacker could exploit this weakness by manipulating a connected backend system to trigger affected functionality. This could allow arbitrary command...

CVE-2026-66768 Improper Access Control in SAP NetWeaver (SAP GUI for Java)

SAP GUI for Java does not correctly enforce the trust level policy for certain functions invoked from a connected backend system. A low-privileged attacker could exploit this weakness by manipulating a connected backend system to trigger affected functionality. This could allow arbitrary command...

ROS-20260908-73-0019

The vulnerability in Java-11-openjdk is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260908-73-0009

The vulnerability in Java-21-openjdk is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

ROS-20260908-73-0008

The vulnerability in Java-17-openJDK is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

ROS-20260908-73-0007

The vulnerability in Java-11-openjdk is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2026-86513: Allocation of Resources Without Limits or Throttling

A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function TreePointer.tokensFromInput of the file src/main/java/com/github/fge/jackson/jsonpointer/TreePointer.java of the component JSON Pointer parser. The manipulation results in...

ROS-20260908-73-0015

The vulnerability in Java-17-openJDK is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

ROS-20260908-73-0001

The vulnerability in Java 1.8.0-openjdk is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ROS-20260908-73-0002

The vulnerability in Java-11-openjdk is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ROS-20260908-73-0017

The vulnerability in Java-25-openJDK is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

ROS-20260908-73-0013

The vulnerability in Java 1.8.0-openjdk is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to enhance their privileges...

ROS-20260908-73-0003

The vulnerability in Java-17-openJDK is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Security update for java-17-openjdk (moderate)

openSUSE security update: security update for java-17-openjdk ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21745-1 Rating: moderate References: bsc1275035 bsc1275764 bsc1275777 bsc1275778 Cross-References: CVE-2026-60589 CVE-2026-61308...