CLEANSTART-2026-CY19546 Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4

CVE-2026-102554 affects multiple packages. Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4. See references for individual vulnerability details...

Security Bulletin: Security vulnerability has been detected in IBM Security Verify Governance Identity Manager Adapters

Summary Security vulnerability has been addressed in IBM Security Verify Governance Identity Manager Adapter for Google Workspace. Vulnerability Details CVEID:CVE-2026-102554 DESCRIPTION: Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Gua...

CLEANSTART-2026-WR01453 Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4

Security vulnerability affects the strimzi-kafka-operator package. Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4...

IBM WebSphere Application Server 8.5.x < 8.5.5.32 / 9.x < 9.0.5.30 (7295372)

The version of IBM WebSphere Application Server running on the remote host is affected by a vulnerability as referenced in the 7295372 advisory. - Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an...

com.google.guava/guava: Google Guava: Denial of Service via unthrottled memory allocation during deserialization

A flaw was found in Google Guava. During Java object deserialization—the process of converting stored data back into active program objects—memory is eagerly allocated based on caller-specified size parameters without proper throttling or limits. An attacker can exploit this issue by providing a...

com.google.guava/guava: Google Guava: Denial of Service via unthrottled memory allocation during deserialization

A flaw was found in Google Guava. During Java object deserialization—the process of converting stored data back into active program objects—memory is eagerly allocated based on caller-specified size parameters without proper throttling or limits. An attacker can exploit this issue by providing a...

com.google.guava/guava: Google Guava: Denial of Service via unthrottled memory allocation during deserialization

A flaw was found in Google Guava. During Java object deserialization—the process of converting stored data back into active program objects—memory is eagerly allocated based on caller-specified size parameters without proper throttling or limits. An attacker can exploit this issue by providing a...

CLEANSTART-2026-LV29506 Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4

CVE-2026-102554 affects multiple packages. Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4. See references for individual vulnerability details...

CVE-2026-33439-PoC

CVE-2026-33439 — Remote Code Execution in OpenAM An unauthenticated Remote Code Execution Pre-Authentication Remote Code Execution vulnerability affecting OpenIdentityPlatform OpenAM versions 16.0.5 and earlier. The issue is related to insecure Java object deserialization through the...

CLEANSTART-2026-PY38052 Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4

CVE-2026-102554 affects multiple packages. Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4. See references for individual vulnerability details...

CLEANSTART-2026-NU79026 Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4

CVE-2026-102554 affects multiple packages. Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4. See references for individual vulnerability details...

CLEANSTART-2026-SL64169 Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4

Security vulnerability affects the keycloak package. Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4...

SUSE SLED15 / SLES15 Security Update : guava, j2objc-annotations (SUSE-SU-2026:5061-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:5061-1 advisory. This update for guava, j2objc-annotations fixes the following issue: - CVE-2026-102554: Allocation of resources without...

Security update for guava, j2objc-annotations

This update for guava, j2objc-annotations fixes the following issue: CVE-2026-102554: Allocation of resources without limits or throttling CWE-770 during Java object deserialization allows an attacker to cause a Denial of Service via OutOfMemoryError bsc1284985. Changes for guava: Upgrade to...

SUSE-SU-2026:5061-1 Security update for guava, j2objc-annotations

This update for guava, j2objc-annotations fixes the following issue: - CVE-2026-102554: Allocation of resources without limits or throttling CWE-770 during Java object deserialization allows an attacker to cause a Denial of Service via OutOfMemoryError bsc1284985. Changes for guava: - Upgrade to...

CLEANSTART-2026-BX48253 Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4

Security vulnerability affects the sonarqube package. Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4...

PT-2026-146133

Security vulnerability affects the sonarqube package. Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4...

CLEANSTART-2026-PW65051 Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4

CVE-2026-102554 affects multiple packages. Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4. See references for individual vulnerability details...

CLEANSTART-2026-EH44989 Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4

Security vulnerability affects the sonarqube package. Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4...

CLEANSTART-2026-UK97586 Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4

Security vulnerability affects the sonarqube package. Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4...