Improper Handling of Highly Compressed Data (Data Amplification)

Overview org.asynchttpclient:async-http-client is a maven plugin for the Async Http Client AHC classes. Affected versions of this package are vulnerable to Improper Handling of Highly Compressed Data Data Amplification through ChannelManager.newHttpContentDecompressor in...

DEBIAN-CVE-2026-85720

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, a request using an HTTP proxy to reach an HTTPS origin can expose preemptive origin credentials because NettyRequestFactory and...

UBUNTU-CVE-2026-85716

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 3.0.8 until 3.0.12, processScramAuthenticationInfo and processAuthenticationInfo compute the SCRAM ServerSignature or Digest rspauth verification result but log...

CVE-2026-54677 Scoold: Authenticated user can post replies and comments to private-space questions without space membership

Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.0, authenticated users who are not members of a private space can create content in questions belonging to that space because src/main/java/com/erudika/scoold/controllers/QuestionController.java in QuestionController.reply...

EUVD-2026-82337

Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.0, authenticated users who are not members of a private space can create content in questions belonging to that space because src/main/java/com/erudika/scoold/controllers/QuestionController.java in QuestionController.reply...

SUSE CVE-2026-75516

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.34.0, AMQConnection.start applies Math.minmaxInboundMessageBodySize, frameMax after Connection.Tune negotiation even though AMQP defines frameMax value zero as...

Directory Traversal

Overview com.github.junrar:junrar is a rar decompression library in plain java. Affected versions of this package are vulnerable to Directory Traversal due to unchecked intermediate directory creation in LocalFolderExtractor’s makeFile path handling. An attacker can create directories outside the...

EUVD-2026-81011

Junrar: LocalFolderExtractor mkdir escape allows directory creation outside extraction root...

Junrar: LocalFolderExtractor mkdir escape allows directory creation outside extraction root

Summary LocalFolderExtractor validates only the final canonical file path before extraction. However, makeFile creates intermediate directories one path segment at a time without checking whether each created directory remains inside the destination folder. A malicious RAR entry can make the fina...

Access Control Bypass

Overview Affected versions of this package are vulnerable to Access Control Bypass through the ClientMessage server-initiated LOCAL INFILE handling in src/main/java/org/mariadb/jdbc/message/ClientMessage.java. An attacker can make the client send a local file by replying to a LOAD DATA LOCAL INFI...

org.codefilarete.stalactite:core-mariadb-adapter (1.0.0), org.codefilarete.stalactite:sql-mariadb-adapter (1.0.0) +5 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.3.4)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - org.codefilarete.stalactite:core-mariadb-adapter 1.0.0 -...

io.zipkin:zipkin-collector-service (>=1.26.0, <=1.39.2), io.zipkin:zipkin-query-service (>=1.26.0, <=1.39.2) potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.3.3)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.zipkin:zipkin-collector-service =1.26.0, =1.26.0, =1.39.2 Source cves: CVE-2026-6170...

com.despegar:galera-java-client (>=1.0.9, <=1.0.10) potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.2.0)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.despegar:galera-java-client =1.0.9, =1.0.10 Source cves: CVE-2026-61700 Source...

com.gitlab.java-ebms-adapter:ebms-core (2.15.2-mic), org.jiucai:appframework (2.1.2) +5 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.1.9)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.gitlab.java-ebms-adapter:ebms-core 2.15.2-mic - org.jiucai:appframework 2.1.2 -...

ai.starlake:starlake-api_2.13 (>=1.5.8, <=1.5.15), at.meks.quarkiverse.axonframework-extension:quarkus-axonframework-extension-integration-tests (0.1.0-rc14) +400 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (>=3.5.0, <=3.5.8)

org.mariadb.jdbc:mariadb-java-client MAVEN version =3.5.0, =1.5.8, =0.1.0-rc15, =3.3.0, =1.0.3, =1.0.0, =1.21.1, =1.7.1, =1.7.1, =2.2.5, =2.2.5, =2.2.5, =2.0.0-rc4, =2.0.0-rc4, =2.0.0 and more Source cves: CVE-2026-61700 Source advisory: OSV:GHSA-WXMM-Q36W-R9XJ...

ch.vorburger.mariadb4j:mariadb4j-app (3.2.0), cn.zpcnet.beanforge:beanforge-cli (0.2.0) +183 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (>=3.4.0, <=3.4.2)

org.mariadb.jdbc:mariadb-java-client MAVEN version =3.4.0, =1.0.2, =1.1.0, =1.0.5, =1.1.0, =1.1.0, =1.1.0, =0.2.0, =1.1.0, =7.0.0, =7.0.0, =9.1.1 and more Source cves: CVE-2026-61700 Source advisory: SNYK:JAVA-ORGMARIADBJDBC-19964085...

ba.sake:mill-squery-generator_mill0.11_2.13 (>=0.4.0, <=0.7.0), ba.sake:mill-squery-generator_mill1_3 (>=0.8.0, <=0.11.0) +656 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (>=3.0.3, <=3.3.4)

org.mariadb.jdbc:mariadb-java-client MAVEN version =3.0.3, =0.4.0, =0.8.0, =6.0.0, =6.0.3, =2.6.0, =2.0.0, =0.4.2, =0.0.1, =1.0.0, =1.6.2, =1.6.2, =2.2.0, =3.2.0 and more Source cves: CVE-2026-61700 Source advisory: SNYK:JAVA-ORGMARIADBJDBC-19964085...

ba.sake:mill-squery-generator_mill0.11_2.13 (>=0.4.0, <=0.7.0), ba.sake:mill-squery-generator_mill1_3 (>=0.8.0, <=0.11.0) +656 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (>=3.0.3, <=3.3.4)

org.mariadb.jdbc:mariadb-java-client MAVEN version =3.0.3, =0.4.0, =0.8.0, =6.0.0, =6.0.3, =2.6.0, =2.0.0, =0.4.2, =0.0.1, =1.0.0, =1.6.2, =1.6.2, =2.2.0, =3.2.0 and more Source cves: CVE-2026-61700 Source advisory: OSV:GHSA-WXMM-Q36W-R9XJ...

com.randomnoun.db:sql-explainerator (>=0.0.2, <=1.0.1) potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.8.0)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.randomnoun.db:sql-explainerator =0.0.2, =1.0.1 Source cves: CVE-2026-61700 Source...

io.zipkin.dependencies:zipkin-dependencies (>=2.0.1, <=2.0.8), io.zipkin.dependencies:zipkin-dependencies-mysql (>=2.0.1, <=2.0.8) +12 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.7.4)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.zipkin.dependencies:zipkin-dependencies =2.0.1, =2.0.1, =0.20.17, =0.38.5, =0.40.0,...