538 matches found
CLSA-2026-1788348298 TuxCare security update for com.fasterxml.jackson.core:jackson-databind (3 CVEs)
TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 3 CVEs. Fixed in 2.14.2-tuxcare.2...
CLSA-2026-1788328472 TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.0.1-tuxcare.1...
CLSA-2026-1788215347 TuxCare security update for org.apache.logging.log4j (7 CVEs)
TuxCare rebuilt 23 org.apache.logging.log4j packages to address 7 CVEs. Fixed in 2.11.0-tuxcare.1...
CLSA-2026-1788196519 TuxCare security update for org.springframework.data:spring-data-ldap (4 CVEs)
TuxCare rebuilt org.springframework.data:spring-data-ldap to address 4 CVEs. Fixed in 3.3.13-tuxcare.3...
CLSA-2026-1788193903 TuxCare security update for io.netty (2 CVEs)
TuxCare rebuilt 40 io.netty packages to address 2 CVEs. Fixed in 4.1.48.Final-tuxcare.3...
CVE-2026-82596
LatencyUtils (versions up to 2.0.3) contains a memory corruption vulnerability in the PauseDetector component, specifically in the function LatencyStats.recordDetectedPause within src/main/java/org/LatencyUtils/LatencyStats.java. The flaw requires a local attack and results in partial/low availab...
CVE-2026-82596 LatencyUtils PauseDetector LatencyStats.java LatencyStats.recordDetectedPause memory corruption
A vulnerability was determined in LatencyUtils up to 2.0.3. Affected by this issue is the function LatencyStats.recordDetectedPause of the file src/main/java/org/LatencyUtils/LatencyStats.java of the component PauseDetector. Executing a manipulation can lead to memory corruption. The attack needs...
CLSA-2026-1787905903 TuxCare security update for com.mchange:c3p0 (1 CVE)
TuxCare rebuilt com.mchange:c3p0 to address 1 CVE. Fixed in 0.9.5.4-tuxcare.1...
RLSA-2026:60215 Moderate: assertj-core security update
A rich and intuitive set of strongly-typed assertions to use for unit testing either with JUnit or TestNG. Security Fixes: assertj: AssertJ: Information disclosure and denial of service via XML External Entity XXE CVE-2026-24400 For more details about the security issues, including the impact, a...
CLSA-2026-1787668008 TuxCare security update for io.netty (6 CVEs)
TuxCare rebuilt 47 io.netty packages to address 6 CVEs. Fixed in 4.1.93.Final-tuxcare.3...
ALSA-2026:59372 Moderate: assertj-core security update
A rich and intuitive set of strongly-typed assertions to use for unit testing either with JUnit or TestNG. Security Fixes: assertj: AssertJ: Information disclosure and denial of service via XML External Entity XXE CVE-2026-24400 For more details about the security issues, including the impact, a...
JLSEC-2026-1375 Apache Avro Java SDK is Vulnerable to Code Injection
Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas. This issue affects Apache Avro Java SDK: all versions through 1.11.4 and version 1.12.0. Users are recommended to upgrade to version 1.12.1 o...
CVE-2026-76904: Improper Neutralization of Special Elements used in an SQL Command
GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerability is present when executing OGC Filters with PostGIS DataStore implementation: jsonArrayContains function; Requires...
Deserialization of Untrusted Data
Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the deserialization. An attacker can execute arbitrary code or manipulate application behavior by supplying specially crafted input that is deserialized without proper validation. Details Serializati...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization in the partition interceptor. An attacker can cause unauthorized modification or disclosure of message data by manipulating the message sending process. Remediation Upgrade...
CLSA-2026-1787145317 TuxCare security update for org.springframework.data (4 CVEs)
TuxCare rebuilt 4 org.springframework.data packages to address 4 CVEs. Fixed in 3.4.13-tuxcare.1...
CLSA-2026-1787141079 TuxCare security update for log4j:log4j (1 CVE)
TuxCare rebuilt log4j:log4j to address 1 CVE. Fixed in 1.2.16-tuxcare.2...
CLSA-2026-1787115093 TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.0.20-tuxcare.1...