Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition products of Oracle Java SE component: Serialization. The supported versions affected by this vulnerability are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK...

Astra Linux – Vulnerability in openjdk-11

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition products of Oracle Java SE component: Security. The supported versions affected by this vulnerability are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9,...

graal (>=0.3.2rc3, <=0.4.1rc3), grimoire-elk (>=0.103.0rc10, <=0.103.2rc2) +8 more potentially affected by unknown CVE via dulwich (0.20.46)

dulwich PYPI version 0.20.46 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - graal =0.3.2rc3, =0.103.0rc10, =0.6.0, =0.2.2rc4, =0.20.0rc6, =0.3.2rc4, =0.2.2rc4, =0.2.2rc4, =0.2.2rc5, =0.4.0rc1, =0.5.0rc2 Source cves:...

graal (>=0.3.2rc1, <=0.3.2rc2), grimoire-elk (>=0.103.0rc1, <=0.103.0rc3) potentially affected by unknown CVE via dulwich (0.20.42)

dulwich PYPI version 0.20.42 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - graal =0.3.2rc1, =0.103.0rc1, =0.103.0rc3 Source cves: unknown CVE Source advisory: OSV:GHSA-8MCX-5RQC-VHMF...

graal (>=0.3.2rc1, <=0.3.2rc2), grimoire-elk (>=0.103.0rc1, <=0.103.0rc3) potentially affected by unknown CVE via dulwich (0.20.42)

dulwich PYPI version 0.20.42 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - graal =0.3.2rc1, =0.103.0rc1, =0.103.0rc3 Source cves: unknown CVE Source advisory: OSV:GHSA-35MR-4567-66VG...

graal (>=0.3.2rc3, <=0.4.1rc3), grimoire-elk (>=0.103.0rc10, <=0.103.2rc2) +8 more potentially affected by unknown CVE via dulwich (0.20.46)

dulwich PYPI version 0.20.46 is affected by a known vulnerability. The following packages have a transitive dependency on dulwich and may be impacted: - graal =0.3.2rc3, =0.103.0rc10, =0.6.0, =0.2.2rc4, =0.20.0rc6, =0.3.2rc4, =0.2.2rc4, =0.2.2rc4, =0.2.2rc5, =0.4.0rc1, =0.5.0rc2 Source cves:...

CVE-2026-55799

Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger = 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue...

CVE-2026-55799

Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger = 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue...

CVE-2026-55799 Apache Ranger: Remote Code Execution Vulnerability in GraalScriptEngineCreator

Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger = 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue...

ROS-20260810-73-0009

The vulnerability of the Networking component of the Oracle Java SE software platform, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to...

openjdk: Enhance JPEG handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. ASAN reports a heap integrity violation...

openjdk: Enhance JPEG handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. ASAN reports a heap integrity violation...

openjdk: Enhance AWT ImagingLib (Oracle CPU 2026-07)

A flaw was found in OpenJDK. When the software processes certain images, a specific function fails to manage memory boundaries correctly. This can lead to the application attempting to access invalid memory or dereference a null pointer, which may cause the application to unexpectedly terminate...

openjdk: Enhance TLS certificate handling (Oracle CPU 2026-07)

A flaw was found in OpenJDK. When a server has wantClientAuth and the client sends a nocertificate alert, any client certificates are not verified...

openjdk: Improve DTLS handshaking (Oracle CPU 2026-07)

A flaw was found in OpenJDK. The DTLS implementation is open to two different DoS attacks...

com.aegisql:conveyor-configurator (>=1.5.1, <=1.5.2), com.datastax.oss.quarkus:cassandra-quarkus-client (>=1.0.1, <=1.0.4) +2043 more potentially affected by CVE-2026-46968 via org.graalvm.sdk:graal-sdk (>=21.0.0, <=21.0.0.2)

org.graalvm.sdk:graal-sdk MAVEN version =21.0.0, =1.5.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.1, =1.0.3, =1.0.1, =1.0.1, =1.0.1, =4.11.0, =1.2.0, =1.2.0, =1.4.0 and more Source cves: CVE-2026-46968 Source advisory: SNYK:JAVA-ORGGRAALVMSDK-1...

edge-tts (5.0.2), graal (>=0.3.2rc7, <=0.4.0) +10 more potentially affected by CVE-2026-59890 via setuptools (65.4.0)

setuptools PYPI version 65.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - edge-tts 5.0.2 - graal =0.3.2rc7, =0.103.0rc10, =0.2.2rc8, =0.20.0rc13, =0.3.2rc9, =0.2.2rc10, =0.2.2rc9, =0.2.2rc11, =0.1.2, =0.4.0rc1,...

daktari (>=0.0.92, <=0.0.93), graal (>=0.4.5rc2, <=0.4.5) +10 more potentially affected by CVE-2026-59890 via setuptools (67.7.1)

setuptools PYPI version 67.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - daktari =0.0.92, =0.4.5rc2, =0.104.3rc2, =0.9.0rc1, =0.21.4rc2, =0.3.8rc2, =0.2.8rc2, =0.2.8rc2, =0.2.8rc2, =0.7.0rc1, =0.9.0rc2, =0.9.0 -...

graal (0.4.3rc3), perceval (0.21.2rc3) +5 more potentially affected by CVE-2026-59890 via setuptools (66.1.0)

setuptools PYPI version 66.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - graal 0.4.3rc3 - perceval 0.21.2rc3 - perceval-mozilla 0.3.6rc3 - perceval-opnfv 0.2.6rc3 - perceval-puppet 0.2.6rc3 - perceval-weblate...

Azul Zulu Java Multiple Vulnerabilities (2026-07-21)

The version of Azul Zulu installed on the remote host is 6 prior to 6.81.0.14 / 7 prior to 7.87.0.14 / 8 prior to 8.95.0.14 / 11 prior to 11.89.14 / 17 prior to 17.67.14 / 21 prior to 21.51.14 / 25 prior to 25.35.14 / 25 prior to 25.35.12 / 26 prior to 26.32.14. It is, therefore, affected by...