EUVD-2026-40000

A flaw has been found in antlr ANTLR4 up to 4.13.2. This affects the function ObjectInputStream.readObject of the file antlr4-maven-plugin/src/main/java/org/antlr/mojo/antlr4/GrammarDependencies.java of the component Maven Plugin. This manipulation causes time-of-check time-of-use. The attack is...

CVE-2026-13502 antlr ANTLR4 Maven Plugin GrammarDependencies.java ObjectInputStream.readObject toctou

A flaw has been found in antlr ANTLR4 up to 4.13.2. This affects the function ObjectInputStream.readObject of the file antlr4-maven-plugin/src/main/java/org/antlr/mojo/antlr4/GrammarDependencies.java of the component Maven Plugin. This manipulation causes time-of-check time-of-use. The attack is...

Linux Distros Unpatched Vulnerability : CVE-2026-13502

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in antlr ANTLR4 up to 4.13.2. This affects the function ObjectInputStream.readObject of the file...

PT-2026-53113

A flaw has been found in antlr ANTLR4 up to 4.13.2. This affects the function ObjectInputStream.readObject of the file antlr4-maven-plugin/src/main/java/org/antlr/mojo/antlr4/GrammarDependencies.java of the component Maven Plugin. This manipulation causes time-of-check time-of-use. The attack is...

CVE-2026-13502: Time-of-check Time-of-use (TOCTOU) Race Condition

A flaw has been found in antlr ANTLR4 up to 4.13.2. This affects the function ObjectInputStream.readObject of the file antlr4-maven-plugin/src/main/java/org/antlr/mojo/antlr4/GrammarDependencies.java of the component Maven Plugin. This manipulation causes time-of-check time-of-use. The attack is...

com.atomicleopard.thundr:thundr-contrib-gae-admin (1.0.0), com.github.jknack:handlebars-guava-cache (1.3.1) +22 more potentially affected by CVE-2026-55760 via com.github.jknack:handlebars (1.3.1)

com.github.jknack:handlebars MAVEN version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars and may be impacted: - com.atomicleopard.thundr:thundr-contrib-gae-admin 1.0.0 - com.github.jknack:handlebars-guava-cache 1.3....

at.yawk.cricket:cricket-template (2.0), com.benjaminsproule.swagger:com.benjaminsproule.swagger.gradle.plugin (>=0.1.1, <=0.1.9) +41 more potentially affected by CVE-2026-55760 via com.github.jknack:handlebars (1.3.2)

com.github.jknack:handlebars MAVEN version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars and may be impacted: - at.yawk.cricket:cricket-template 2.0 -...

com.github.jknack:handlebars-guava-cache (2.3.1), com.github.jknack:handlebars-helpers (2.3.1) +8 more potentially affected by CVE-2026-55760 via com.github.jknack:handlebars (2.3.1)

com.github.jknack:handlebars MAVEN version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars and may be impacted: - com.github.jknack:handlebars-guava-cache 2.3.1 - com.github.jknack:handlebars-helpers 2.3.1 -...

com.github.jknack:handlebars-guava-cache (1.2.0), com.github.jknack:handlebars-helpers (1.2.0) +6 more potentially affected by CVE-2026-55760 via com.github.jknack:handlebars (1.2.0)

com.github.jknack:handlebars MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.github.jknack:handlebars and may be impacted: - com.github.jknack:handlebars-guava-cache 1.2.0 - com.github.jknack:handlebars-helpers 1.2.0 -...

Information Disclosure

Vaadin Maven Plugin and Vaadin Gradle Plugin are vulnerable to information disclosure. The vulnerability is due to the plugins logging the complete set of environment variables when the frontend build process fails with a non-zero exit status, which allows an attacker to obtain sensitive...

org.apache.camel.maven:camel-servicenow-maven-plugin (>=3.14.5, <=3.14.9), org.apache.camel.springboot:camel-servicenow-starter (>=3.14.5, <=3.14.9) +31 more potentially affected by CVE-2026-50634 via org.apache.cxf:cxf-rt-rs-security-jose-jaxrs (3.4.8)

org.apache.cxf:cxf-rt-rs-security-jose-jaxrs MAVEN version 3.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-jose-jaxrs and may be impacted: - org.apache.camel.maven:camel-servicenow-maven-plugin =3.14.5, =3.14.5,...

org.apache.camel.kafkaconnector:camel-servicenow-kafka-connector (>=0.7.0, <=0.7.2), org.apache.camel.maven:camel-servicenow-maven-plugin (>=3.7.0, <=3.7.2) +14 more potentially affected by CVE-2026-50634 via org.apache.cxf:cxf-rt-rs-security-jose-jaxrs (3.4.1)

org.apache.cxf:cxf-rt-rs-security-jose-jaxrs MAVEN version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-jose-jaxrs and may be impacted: - org.apache.camel.kafkaconnector:camel-servicenow-kafka-connector =0.7.0...

org.apache.camel.kafkaconnector:camel-servicenow-kafka-connector (0.1.0), org.apache.camel.maven:camel-servicenow-maven-plugin (>=2.25.0, <=3.1.0) +15 more potentially affected by CVE-2026-50634 via org.apache.cxf:cxf-rt-rs-security-jose-jaxrs (3.3.5)

org.apache.cxf:cxf-rt-rs-security-jose-jaxrs MAVEN version 3.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-jose-jaxrs and may be impacted: - org.apache.camel.kafkaconnector:camel-servicenow-kafka-connector 0.1.0 ...

org.apache.camel.maven:camel-servicenow-maven-plugin (>=2.23.4, <=2.24.2), org.apache.camel:camel-linkedin (>=2.23.4, <=2.24.2) +12 more potentially affected by CVE-2026-50634 via org.apache.cxf:cxf-rt-rs-security-jose-jaxrs (3.2.10)

org.apache.cxf:cxf-rt-rs-security-jose-jaxrs MAVEN version 3.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-jose-jaxrs and may be impacted: - org.apache.camel.maven:camel-servicenow-maven-plugin =2.23.4, =2.23.4,...

org.apache.camel.maven:camel-servicenow-maven-plugin (>=3.20.6, <=3.20.9), org.apache.camel.springboot:camel-servicenow-starter (>=3.20.6, <=3.20.9) +8 more potentially affected by CVE-2026-50634 via org.apache.cxf:cxf-rt-rs-security-jose-jaxrs (3.5.6)

org.apache.cxf:cxf-rt-rs-security-jose-jaxrs MAVEN version 3.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-jose-jaxrs and may be impacted: - org.apache.camel.maven:camel-servicenow-maven-plugin =3.20.6, =3.20.6,...

org.apache.camel.maven:camel-servicenow-maven-plugin (3.11.7), org.apache.camel.springboot:camel-servicenow-starter (3.11.7) +7 more potentially affected by CVE-2026-50630 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.4.7)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - org.apache.camel.maven:camel-servicenow-maven-plugin 3.11.7 -...

org.apache.camel.kafkaconnector:camel-servicenow-kafka-connector (>=0.11.0, <=0.11.5), org.apache.camel.maven:camel-servicenow-maven-plugin (>=3.7.5, <=3.12.0) +13 more potentially affected by CVE-2026-50631 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.4.4)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - org.apache.camel.kafkaconnector:camel-servicenow-kafka-connector =0.11.0, =3.7....

org.apache.camel.maven:camel-servicenow-maven-plugin (3.11.7), org.apache.camel.springboot:camel-servicenow-starter (3.11.7) +7 more potentially affected by CVE-2026-50631 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.4.7)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - org.apache.camel.maven:camel-servicenow-maven-plugin 3.11.7 -...

org.apache.camel.kafkaconnector:camel-servicenow-kafka-connector (>=0.5.0, <=0.6.1), org.apache.camel.maven:camel-servicenow-maven-plugin (>=3.5.0, <=3.6.0) +11 more potentially affected by CVE-2026-50631 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.4.0)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - org.apache.camel.kafkaconnector:camel-servicenow-kafka-connector =0.5.0, =3.5.0...

org.apache.camel.maven:camel-servicenow-maven-plugin (>=3.22.0, <=3.22.4), org.apache.camel.springboot:camel-servicenow-starter (>=3.22.0, <=3.22.4) +7 more potentially affected by CVE-2026-50627 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.6.2)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - org.apache.camel.maven:camel-servicenow-maven-plugin =3.22.0, =3.22.0, =3.22.0,...