CVE-2026-83460

Vulnerability in the Helidon product of Oracle Fusion Middleware component: LRA. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can...

EUVD-2026-79759

Vulnerability in the Helidon product of Oracle Fusion Middleware component: LRA. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can...

CVE-2026-83460

CVE-2026-83460 affects the LRA component of Oracle Helidon (part of Oracle Fusion Middleware), versions 4.0.0 through 4.5.4 . The vulnerability is an easily exploitable flaw allowing an unauthenticated attacker with network access via HTTP to compromise the service. Successful exploitation can re...

PT-2026-92927

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware Helidon versions 4.0.0 through 4.5.4 Description A flaw in the LRA component allows an unauthenticated attacker with network access via HTTP to compromise the system. This can lead to unauthorized read access to a subs...

CVE-2026-83460: Improper Access Control

Vulnerability in the Helidon product of Oracle Fusion Middleware component: LRA. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can...

EUVD-2025-0041

Malicious code in bioql PyPI...

Denial Of Service (DoS)

org.jboss.narayana.rts:lra-coordinator-jar is vulnerable to a denial of service DoS. The vulnerability is due to a race condition in the LRA Coordinator component. If Cancel is called on an LRA and Join is called with the same LRA ID within approximately 2 seconds, the application may crash or ha...

Narayana deadlock via multiple join requests sent to LRA Coordinator

A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application may crash or hang indefinitely, leading to a denial of...

org.jboss.narayana.rts:lra-test-arquillian-extension (>=7.0.0.final, <=7.0.2.final), org.wildfly:wildfly-feature-pack-galleon-shared (>=30.0.0.beta1, <=34.0.1.final) +3 more potentially affected by CVE-2024-8447 via org.jboss.narayana.rts:lra-coordinator-jar (>=7.0.0.final, <=7.0.2.final)

org.jboss.narayana.rts:lra-coordinator-jar MAVEN version =7.0.0.final, =7.0.0.final, =30.0.0.beta1, =30.0.0.beta1, =30.0.0.beta1, =30.0.0.beta1, =34.0.1.final Source cves: CVE-2024-8447 Source advisory: GHSA-QQ9F-Q439-2574...

org.jboss.narayana.rts:lra-coordinator-quarkus (5.12.6.final), org.jboss.narayana.rts:lra-test-arquillian-extension (5.12.6.final) potentially affected by CVE-2024-8447 via org.jboss.narayana.rts:lra-coordinator-jar (5.12.6.final)

org.jboss.narayana.rts:lra-coordinator-jar MAVEN version 5.12.6.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.narayana.rts:lra-coordinator-jar and may be impacted: - org.jboss.narayana.rts:lra-coordinator-quarkus 5.12.6.final -...

org.jboss.narayana.rts:lra-coordinator-quarkus (5.11.2.final), org.jboss.narayana.rts:lra-coordinator-thorntail (5.11.2.final) potentially affected by CVE-2024-8447 via org.jboss.narayana.rts:lra-coordinator-jar (5.11.2.final)

org.jboss.narayana.rts:lra-coordinator-jar MAVEN version 5.11.2.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.narayana.rts:lra-coordinator-jar and may be impacted: - org.jboss.narayana.rts:lra-coordinator-quarkus 5.11.2.final -...

org.jboss.narayana.rts:lra-test-arquillian-extension (6.0.1.final), org.wildfly:wildfly-feature-pack-galleon-shared (>=29.0.0.alpha1, <=29.0.1.final) +3 more potentially affected by CVE-2024-8447 via org.jboss.narayana.rts:lra-coordinator-jar (6.0.1.final)

org.jboss.narayana.rts:lra-coordinator-jar MAVEN version 6.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.narayana.rts:lra-coordinator-jar and may be impacted: - org.jboss.narayana.rts:lra-test-arquillian-extension 6.0.1.final -...

org.jboss.narayana.rts:lra-test-arquillian-extension (6.0.0.final), org.wildfly:wildfly-galleon-pack (>=28.0.0.beta1, <=28.0.1.final) +3 more potentially affected by CVE-2024-8447 via org.jboss.narayana.rts:lra-coordinator-jar (6.0.0.final)

org.jboss.narayana.rts:lra-coordinator-jar MAVEN version 6.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.narayana.rts:lra-coordinator-jar and may be impacted: - org.jboss.narayana.rts:lra-test-arquillian-extension 6.0.0.final -...

org.jboss.narayana.rts:lra-coordinator-jar-jakarta (5.13.1.alpha1), org.jboss.narayana.rts:lra-test-arquillian-extension (5.13.1.alpha1) potentially affected by CVE-2024-8447 via org.jboss.narayana.rts:lra-coordinator-jar (5.13.1.alpha1)

org.jboss.narayana.rts:lra-coordinator-jar MAVEN version 5.13.1.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.narayana.rts:lra-coordinator-jar and may be impacted: - org.jboss.narayana.rts:lra-coordinator-jar-jakarta 5.13.1.alpha1 -...

org.jboss.narayana.rts:lra-coordinator-jar-jakarta (5.13.1.final), org.jboss.narayana.rts:lra-test-arquillian-extension (5.13.1.final) potentially affected by CVE-2024-8447 via org.jboss.narayana.rts:lra-coordinator-jar (5.13.1.final)

org.jboss.narayana.rts:lra-coordinator-jar MAVEN version 5.13.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.narayana.rts:lra-coordinator-jar and may be impacted: - org.jboss.narayana.rts:lra-coordinator-jar-jakarta 5.13.1.final -...

org.jboss.narayana.rts:lra-coordinator-quarkus (5.11.0.final), org.jboss.narayana.rts:lra-coordinator-thorntail (5.11.0.final) potentially affected by CVE-2024-8447 via org.jboss.narayana.rts:lra-coordinator-jar (5.11.0.final)

org.jboss.narayana.rts:lra-coordinator-jar MAVEN version 5.11.0.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.narayana.rts:lra-coordinator-jar and may be impacted: - org.jboss.narayana.rts:lra-coordinator-quarkus 5.11.0.final -...

GHSA-QQ9F-Q439-2574 Narayana deadlock via multiple join requests sent to LRA Coordinator

A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application may crash or hang indefinitely, leading to a denial of...

CVE-2024-8447

A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application may crash or hang indefinitely, leading to a denial of...

CVE-2024-8447

A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application may crash or hang indefinitely, leading to a denial of...

CVE-2024-8447 Narayana: deadlock via multiple join requests sent to lra coordinator

A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application may crash or hang indefinitely, leading to a denial of...