CLEANSTART-2026-CW84944 Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings

Security vulnerability affects the spark-sc212-jdk17-py311 package. Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings...

CLEANSTART-2026-QF48371 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings

Security vulnerability affects the spark-sc212-jdk17-py311 package. Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings...

RHEL 10 : java-21-ibm-semeru-certified-jdk (RHSA-2026:72888)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72888 advisory. The IBM Semeru Runtime Certified Edition 21 runtime environment. Security Fixes: OpenJDK: Improve Resource Resolving 2026-08 Security Upda...

PT-2026-108506

Security vulnerability affects the spark-sc212-jdk17-py311 package. Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings...

PT-2026-108583

Security vulnerability affects the apache-hive package. yawkat LZ4 Java provides LZ4 compression for Java...

PT-2026-108538

Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...

PT-2026-108407

Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...

PT-2026-108472

Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...

PT-2026-108582

Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...

PT-2026-108442

Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...

OpenJDK: Enhance TLS server (2026-08 Security Update)

A flaw was found in OpenJDK. An unauthenticated remote attacker can cause a Denial of Service DoS by repeatedly sending replayed handshake initiation messages ClientHello to a Transport Layer Security TLS server. Because the server fails to properly restrict the negotiation loop, it emits an...

Moderate: Red Hat Security Advisory: java-21-ibm-semeru-certified-jdk security update

An update for java-21-ibm-semeru-certified-jdk is now available for Red Hat Enterprise Linux 10.0 Extended Update Support and Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score,...

OpenJDK: Improve Resource Resolving (2026-08 Security Update)

A flaw was found in OpenJDK. The XML cryptographic component does not properly utilize the base Uniform Resource Identifier URI when resolving external references during data retrieval. A remote attacker could exploit this flaw by providing crafted XML input to induce the application to fetch...

OpenJDK: Enhance HTTP Connections (2026-08 Security Update)

A flaw was found in OpenJDK. This vulnerability leads to information disclosure because the java.net.HttpURLConnection networking component does not remove Proxy-Authorization headers during cross-host HTTP Hypertext Transfer Protocol redirects. A remote attacker controlling a web server can...

Security Bulletin: Multiple Security Vulnerabilities in IBM Sterling Partner Engagement Manager.

Summary Multiple vulnerabilities were addressed in IBM Sterling Partner Engagement Manager. Vulnerability Details CVEID:CVE-2025-14813 DESCRIPTION: : Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all core modules. This...

CVE-2026-93451

A flaw was found in snappy-java. A buffer overflow vulnerability exists in the Snappy.uncompressArray methods. This flaw occurs because the methods incorrectly calculate the output array size, passing an undivided length to native code. A remote attacker, by providing specially crafted compressed...

New Remote DoS Attacks Against GraphQL Java

Executive Summary Imperva Threat Research identified a series of remote denial‑of‑service vulnerabilities in GraphQL Java, one of the most widely used libraries for GraphQL in the Java ecosystem. In this blog, we’ll deep dive into these vulnerabilities, analyze their impact, and provide...

Security Bulletin: Security vulnerabilities have been identified in third party libraries shipped with IBM Guardium Cryptography Manager (GCM)

Summary Security vulnerabilities identified in the third party libraries shipped with IBM Guardium Cryptography Manager GCM have been addressed. Vulnerability Details CVEID:CVE-2026-12817 DESCRIPTION: In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final tag on chunk-aligned...

Security Bulletin: Security vulnerabilities have been identified in third party libraries shipped with IBM Guardium Cryptography Manager (GCM)

Summary Security vulnerabilities identified in the third party libraries shipped with IBM Guardium Cryptography Manager GCM have been addressed. Vulnerability Details CVEID:CVE-2026-59901 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. Prior to versions...

Security Bulletin: Due to the use of IBM Semeru Runtime, IBM DataPower Gateway is affected by multiple vulnerabilities

Summary IBM DataPower Gateway has addressed multiple vulnerabilities in IBM Semeru Runtime in versions 11.0.0.3, 10.6.0.11, and 10.5.0.23 Vulnerability Details CVEID:CVE-2026-41254 DESCRIPTION: Little CMS lcms2 through 2.18 has an integer overflow in CubeSize in cmslut.c because the overflow chec...