GHSA-5FXQ-F64V-57FQ vulnerabilities

Vulnerabilities for packages: openjdk-25-openj9, openjdk-26-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9...

GHSA-6JQW-6G89-R7RG vulnerabilities

Vulnerabilities for packages: openjdk-25-openj9, openjdk-26-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9...

GHSA-75HH-423H-RVWG vulnerabilities

Vulnerabilities for packages: openjdk-25-openj9, openjdk-26-openj9, openjdk-11-openj9, openjdk, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9...

CVE-2026-34268 vulnerabilities

Vulnerabilities for packages: openjdk-25-openj9, openjdk-26-openj9, openjdk-11-openj9, openjdk, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9...

CVE-2026-34282 vulnerabilities

Vulnerabilities for packages: openjdk-25-openj9, openjdk-26-openj9, openjdk-11-openj9, openjdk, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9...

CVE-2025-10911 vulnerabilities

Vulnerabilities for packages: openjdk-25-openj9, openjdk-26-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9...

CVE-2009-2672 vulnerabilities

Vulnerabilities for packages: openjdk-25-openj9, openjdk-26-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9...

CVE-2026-21947 vulnerabilities

Vulnerabilities for packages: openjdk-25-openj9, openjdk-26-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9...

CVE-2025-7425 vulnerabilities

Vulnerabilities for packages: openjdk-25-openj9, openjdk-26-openj9, openjdk-11-openj9, openjdk-21-openj9, openjdk-8-openj9, openjdk-17-openj9...

CVE-2026-42583

Netty is an asynchronous, event-driven network application framework. Prior to 4.2.13.Final and 4.1.133.Final, Lz4FrameDecoder allocates a ByteBuf of size decompressedLength up to 32 MB per block before LZ4 runs. A peer only needs a 21-byte header plus compressedLength payload bytes - 22 bytes if...

EUVD-2026-32926

Hono: IP Restriction bypasses static deny rules for non-canonical IPv6...

RHSA-2026:22328 Red Hat Security Advisory: java-21-ibm-semeru-certified-jdk security update

Bulletin has no description...

Important: Red Hat Security Advisory: java-21-ibm-semeru-certified-jdk security update

An update for java-21-ibm-semeru-certified-jdk is now available for Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 10, and Red Hat Enterprise Linux 10.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Importan...

CVE-2026-47674 Hono: IP Restriction bypasses static deny rules for non-canonical IPv6

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, the ip-restriction middleware hono/ip-restriction compares incoming IP addresses against configured deny and allow rules using string equality after partial normalization. Non-canonical IPv6...

CVE-2026-47676 Hono: app.mount() strips mount prefix using undecoded path, causing incorrect routing for percent-encoded paths

Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, app.mount strips the mount prefix from the incoming request path using the raw URL pathname, while route matching is performed against the percent-decoded path. This inconsistency causes the...

USN-8333-1: CRaC JDK 21 vulnerabilities

Thomas Beckers discovered that the JAXP component of CRaC JDK 21 did not correctly authenticate certain APIs. A remote unauthenticated attacker could possibly use this issue to gain unauthorized access to sensitive information. CVE-2026-22016 It was discovered that the Networking component of CRa...

USN-8328-1: OpenJDK 21 vulnerabilities

Thomas Beckers discovered that the JAXP component of OpenJDK 21 did not correctly authenticate certain APIs. A remote unauthenticated attacker could possibly use this issue to gain unauthorized access to sensitive information. CVE-2026-22016 It was discovered that the Networking component of...

CVE-2026-48249

creationtimestamp| type| source ---|---|--- 2026-05-21 19:27:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmf5nah2ou2o 2026-05-21 19:42:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmf6i3tggj2c...

CVE-2026-48246

creationtimestamp| type| source ---|---|--- 2026-05-21 19:00:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmf44ohpdc2v 2026-05-21 19:02:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmf4blasqq2n...

CVE-2026-44060

creationtimestamp| type| source ---|---|--- 2026-05-21 11:13:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmebzox3tw2c 2026-05-22 07:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmgeetzwa72t...