Lucene search
K

4 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2026/05/11 6:22 p.m.4 views

Security Bulletin: MongoDB Enterprised Advanced affected by: XML External Entity (XXE) vulnerability (CVE-2026-24400)

Summary There are vulnerabilities in assertj-core-3.27.6.jar used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-24400. The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-24400 DESCRIPTION: AssertJ provides Fluent testing assertions for Java and the Java Virtu...

9.1CVSS7.2AI score0.00029EPSS
Exploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2026/01/27 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-24400

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - AssertJ provides Fluent testing assertions for Java and the Java Virtual Machine JVM. Starting in version 1.4.0 and prior to version 3.27.7, an XML External...

9.1CVSS7.4AI score0.00029EPSS
Exploits0References4
OSV
OSV
added 2026/01/26 11:16 p.m.2 views

DEBIAN-CVE-2026-24400

AssertJ provides Fluent testing assertions for Java and the Java Virtual Machine JVM. Starting in version 1.4.0 and prior to version 3.27.7, an XML External Entity XXE vulnerability exists in org.assertj.core.util.xml.XmlStringPrettyFormatter: the toXmlDocumentString method initializes...

9.1CVSS7.9AI score0.00029EPSS
Exploits0References1
OSV
OSV
added 2026/01/26 10:19 p.m.4 views

CVE-2026-24400 AssertJ has XML External Entity (XXE) vulnerability when parsing untrusted XML via isXmlEqualTo assertion

AssertJ provides Fluent testing assertions for Java and the Java Virtual Machine JVM. Starting in version 1.4.0 and prior to version 3.27.7, an XML External Entity XXE vulnerability exists in org.assertj.core.util.xml.XmlStringPrettyFormatter: the toXmlDocumentString method initializes...

8.2CVSS5.9AI score0.00029EPSS
Exploits0References6
Rows per page
Query Builder