CVE-2026-54677 Scoold: Authenticated user can post replies and comments to private-space questions without space membership

Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.0, authenticated users who are not members of a private space can create content in questions belonging to that space because src/main/java/com/erudika/scoold/controllers/QuestionController.java in QuestionController.reply...

EUVD-2026-82337

Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.0, authenticated users who are not members of a private space can create content in questions belonging to that space because src/main/java/com/erudika/scoold/controllers/QuestionController.java in QuestionController.reply...

SUSE CVE-2026-75516

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.34.0, AMQConnection.start applies Math.minmaxInboundMessageBodySize, frameMax after Connection.Tune negotiation even though AMQP defines frameMax value zero as...

Junrar: LocalFolderExtractor mkdir escape allows directory creation outside extraction root

Summary LocalFolderExtractor validates only the final canonical file path before extraction. However, makeFile creates intermediate directories one path segment at a time without checking whether each created directory remains inside the destination folder. A malicious RAR entry can make the fina...

EUVD-2026-81011

Junrar: LocalFolderExtractor mkdir escape allows directory creation outside extraction root...

Directory Traversal

Overview com.github.junrar:junrar is a rar decompression library in plain java. Affected versions of this package are vulnerable to Directory Traversal due to unchecked intermediate directory creation in LocalFolderExtractor’s makeFile path handling. An attacker can create directories outside the...

bayern.steinbrecher:dbconnector (>=0.10, <=0.15), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=4.0.0, <=5.7.9) +519 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (>=2.0.1, <=2.7.13)

org.mariadb.jdbc:mariadb-java-client MAVEN version =2.0.1, =0.10, =4.0.0, =5.6.5, =1.0.0, =1.0.0, =2.4.0, =0.3.5, =1.1.0, =1.1.0, =1.0.2, =1.0.0, =2.10.6.9, =2.0.0, =2.2.0 and more Source cves: CVE-2026-61700 Source advisory: SNYK:JAVA-ORGMARIADBJDBC-19964085...

com.despegar:galera-java-client (>=1.0.11, <=1.0.20), us.fatehi:schemacrawler-mariadb (>=14.05.02, <=14.05.04) potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.3.2)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.despegar:galera-java-client =1.0.11, =14.05.02, =14.05.04 Source cves: CVE-2026-617...

com.hortonworks.registries:storage-tool (>=0.1.0, <=0.3.1), com.rocketfuel.sdbc:mariadb-jdbc_2.11 (2.0.1) +6 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.5.5)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.hortonworks.registries:storage-tool =0.1.0, =2.0, =1.19.0, =1.0, =1.0, =1.7.17 Sour...

com.stratio.crossdata.connector:crossdata-cassandra (>=1.0.0, <=1.2.2), com.stratio.crossdata.connector:crossdata-cassandra_2.10 (>=1.3.0, <=1.5.0) +43 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.2.3)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.stratio.crossdata.connector:crossdata-cassandra =1.0.0, =1.3.0, =1.3.0, =1.0.0,...

edu.uiuc.ncsa.myproxy:oa4mp-client-oauth1 (>=3.3, <=3.4), edu.uiuc.ncsa.myproxy:oa4mp-client-oauth2 (>=3.3, <=3.4) +10 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.4.0)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - edu.uiuc.ncsa.myproxy:oa4mp-client-oauth1 =3.3, =3.3, =3.3, =3.3, =3.3, =3.3, =3.3, =3....

com.rocketfuel.sdbc:mariadb-jdbc_2.11 (>=2.0.2, <=3.0.0), com.rocketfuel.sdbc:mariadb-jdbc_2.12 (>=2.0.2, <=3.0.0) +84 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.5.9)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.5.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.rocketfuel.sdbc:mariadb-jdbc2.11 =2.0.2, =2.0.2, =2.8.0, =2.8.0, =3.0.6, =1.1.0,...

io.zipkin.dependencies:zipkin-dependencies (1.6.1), io.zipkin.dependencies:zipkin-dependencies-mysql (1.6.1) potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.6.2)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.zipkin.dependencies:zipkin-dependencies 1.6.1 -...

ch.inftec.flyway:flyway-extension-commandline (>=1.3.1-beta-2, <=3.2.1-final), ch.inftec.flyway:flyway-extension-example (>=1.3.1-beta-2, <=3.2.1-final) +39 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.1.7)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - ch.inftec.flyway:flyway-extension-commandline =1.3.1-beta-2, =1.3.1-beta-2, =1.0, =2.1....

org.codefilarete.stalactite:core-mariadb-adapter (1.0.0), org.codefilarete.stalactite:sql-mariadb-adapter (1.0.0) +5 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.3.4)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - org.codefilarete.stalactite:core-mariadb-adapter 1.0.0 -...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=3.5.0, <=3.8.0), com.tmsps:ne4spring (>=1.6.6, <=999.0.0.0) potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.5.2)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =3.5.0, =1.6.6, =999.0.0.0 Source cves: CVE-2026-617...

ch.vorburger.mariadb4j:mariadb4j-app (3.2.0), cn.zpcnet.beanforge:beanforge-cli (0.2.0) +184 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (>=3.4.0, <=3.4.2)

org.mariadb.jdbc:mariadb-java-client MAVEN version =3.4.0, =1.0.2, =1.1.0, =1.0.5, =1.1.0, =1.1.0, =1.1.0, =0.2.0, =1.1.0, =7.0.0, =7.0.0, =9.1.1 and more Source cves: CVE-2026-61700 Source advisory: OSV:GHSA-WXMM-Q36W-R9XJ...

bayern.steinbrecher:dbconnector (>=0.10, <=0.15), ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=4.0.0, <=5.7.9) +519 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (>=2.0.1, <=2.7.13)

org.mariadb.jdbc:mariadb-java-client MAVEN version =2.0.1, =0.10, =4.0.0, =5.6.5, =1.0.0, =1.0.0, =2.4.0, =0.3.5, =1.1.0, =1.1.0, =1.0.2, =1.0.0, =2.10.6.9, =2.0.0, =2.2.0 and more Source cves: CVE-2026-61700 Source advisory: GHSA-WXMM-Q36W-R9XJ...

at.chrl:chrl-orm-spring-integration (1.1.0), com.centurylink.mdw:mdw (>=6.0.05, <=6.0.06) +4 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.2.2)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - at.chrl:chrl-orm-spring-integration 1.1.0 - com.centurylink.mdw:mdw =6.0.05, =6.0.03,...

io.zipkin.dependencies:zipkin-dependencies (>=1.7.0, <=1.10.3), io.zipkin.dependencies:zipkin-dependencies-mysql (>=1.7.0, <=1.10.3) +1 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.6.3)

org.mariadb.jdbc:mariadb-java-client MAVEN version 1.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - io.zipkin.dependencies:zipkin-dependencies =1.7.0, =1.7.0, =1.29.4, =2.0.1 Source cves:...