CVE-2025-63687

An issue was discovered in rymcu forest thru commit f782e85 2025-09-04 in function doBefore in file src/main/java/com/rymcu/forest/core/service/security/AuthorshipAspect.java, allowing authorized attackers to delete arbitrary users posts...

The vulnerability of the Java library for converting JSON-lib bean components lies in improper syntax validation of input data, allowing attackers to trigger service failures.

The vulnerability of the Java library for converting JSON-lib bean components is related to improper syntax validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

OESA-2025-2433 google-oauth-java-client security update

Written by Google, the Google OAuth Client Library for Java is a powerful and easy-to-use Java library for the OAuth 1.0a and OAuth 2.0 authorization standards. The Google OAuth Client Library for Java is designed to work with any OAuth service on the web, not just with Google APIs. It is built o...

OESA-2025-2432 google-oauth-java-client security update

Written by Google, the Google OAuth Client Library for Java is a powerful and easy-to-use Java library for the OAuth 1.0a and OAuth 2.0 authorization standards. The Google OAuth Client Library for Java is designed to work with any OAuth service on the web, not just with Google APIs. It is built o...

EUVD-2021-0651

Malware in sbrugna...

EUVD-2018-0502

Malware in sbrugna...

EUVD-2021-2371

Malware in sbrugna...

EUVD-2021-0596

Malware in sbrugna...

EUVD-2020-1466

Malware in sbrugna...

EUVD-2017-15123

Malware in sbrugna...

EUVD-2024-0219

Malicious code in bioql PyPI...

EUVD-2022-1685

Malicious code in bioql PyPI...

EUVD-2025-0175

Malicious code in bioql PyPI...

CVE-2025-59952

MinIO Java SDK is a Simple Storage Service aka S3 client to perform bucket and object operations to any Amazon S3 compatible object storage service. In minio-java versions prior to 8.6.0, XML tag values containing references to system properties or environment variables were automatically...

[SECURITY] [DLA 4286-1] libcommons-lang3-java security update

Debian LTS Advisory DLA-4286-1 [email protected] https://www.debian.org/lts/security/ Daniel Leidert August 31, 2025 https://wiki.debian.org/LTS Package : libcommons-lang3-java Version : 3.11-1+deb11u1 CVE ID : CVE-2025-48924 Debian Bug : 1109125 A vulnerability has been discovered in...

CVE-2025-44033

SQL injection vulnerability in oasystem oasys v.1.1 allows a remote attacker to execute arbitrary code via the allDirector method declaration in src/main/java/cn/gson/oasys/mappers/AddressMapper.java...

com.github.lansheng228:aws-crypto (1.0.3), com.github.yadickson:autocert (>=2.0.0, <=2.0.2) +53 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcprov-ext-jdk15to18 (>=1.64, <=1.78.1)

org.bouncycastle:bcprov-ext-jdk15to18 MAVEN version =1.64, =2.0.0, =1.4.0, =1.4.0, =1.4.0, =1.4.0, =1.4.1, =12.31.0, =v9.6.9-m1, =v9.6.6, =v9.6.6, =v9.6.6, =v9.6.6, =9.6.10 - net.risesoft:risenet-y9boot-api-feignclient-storage 9.6.10 and more Source cves: CVE-2025-8916 Source advisory:...

CVE-2025-8885

A resource exhaustion flaw has been discovered in the Bouncy Castle for Java library. The flaw exists because there was no practical limit on the size of an encoded ASN.1 Object Identifier OID, beyond the maximum size of an ASN1Object. While technically valid, this could be exploited by an attack...

app.cash.backfila:client-misk (>=0.1.0, <=2023.11.24.141218-0357917), app.cash.backfila:client-misk-dynamodb (>=0.1.3-20210127.1838-76ab4fc, <=0.1.4-20210806.0204-5341f38) +1468 more potentially affected by CVE-2025-8885 via org.bouncycastle:bcprov-ext-jdk15on (>=1.47, <=1.70)

org.bouncycastle:bcprov-ext-jdk15on MAVEN version =1.47, =0.1.0, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210805.0116-93702c4, =0.1.3-20210805.0116-93702c4, =0.1.0, =2023.06.07.114626-93b9d6f, =0.1.0, =0.1.4-20220614.0152-5ae0eef, =3.0.1, =2.10.0-11-1, =1.1.5, =1.0.2,...

com.phasmidsoftware:majabigwaduce_3 (>=1.0.6, <=2.0.1) potentially affected by CVE-2025-53393 via com.typesafe.akka:akka-cluster-metrics_3 (2.8.8)

com.typesafe.akka:akka-cluster-metrics3 MAVEN version 2.8.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.typesafe.akka:akka-cluster-metrics3 and may be impacted: - com.phasmidsoftware:majabigwaduce3 =1.0.6, =2.0.1 Source cves: CVE-2025-53393...