OPENSUSE-SU-2026:10791-1 java-21-openj9-21.0.11.0-2.1 on GA media

These are all security issues fixed in the java-21-openj9-21.0.11.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10789-1 java-17-openj9-17.0.19.0-2.1 on GA media

These are all security issues fixed in the java-17-openj9-17.0.19.0-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:10792-1 java-25-openj9-25.0.3.0-2.1 on GA media

These are all security issues fixed in the java-25-openj9-25.0.3.0-2.1 package on the GA media of openSUSE Tumbleweed...

PT-2026-56902

Name of the Vulnerable Software and Affected Versions Metabase versions prior to 1.58.15 Metabase versions prior to 1.59.12 Metabase versions prior to 1.60.6.3 Metabase versions prior to 1.61.1.4 Description Metabase instances using an H2 database connection, including the default sample database...

cn.ibizlab.plugin:ibiz-dataflow-flink (>=8.1.0.371, <=8.1.0.567.22), cn.sliew:flinkful-cli-descriptor-examples (>=1.0.2, <=1.0.7) +365 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-api-java (>=1.15.0, <=1.20.3)

org.apache.flink:flink-table-api-java MAVEN version =1.15.0, =8.1.0.371, =1.0.2, =1.0.2, =1.0.2, =1.0.2, =1.0.2, =1.0.3, =1.0.0, =1.0.2, =1.0.2, =0.5.0, =0.5.0, =1.4.0, =1.5.6.2 and more Source cves: CVE-2026-35194 Source advisory: SNYK:JAVA-ORGAPACHEFLINK-16799798...

com.drobisch:flink-connector-elasticsearch-e2e-tests-common (>=4.0.0-serde-fixes, <=4.0.5-fault-tolerant), com.drobisch:flink-connector-elasticsearch6-e2e-tests (>=4.0.0-serde-fixes, <=4.0.5-fault-tolerant) +27 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-api-java (>=2.0.0, <=2.0.1)

org.apache.flink:flink-table-api-java MAVEN version =2.0.0, =4.0.0-serde-fixes, =4.0.0-serde-fixes, =4.0.0-serde-fixes, =26.0.0, =0.2.0, =6.0.0-2.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1 and more Source cves: CVE-2026-35194 Source advisory: SNYK:JAVA-ORGAPACHEFLINK-16799798...

com.datasqrl.flinkrunner:datagen-connectors (0.10.1), com.datasqrl.flinkrunner:kafka-safe-connector (>=0.9.0, <=0.10.1) +80 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-api-java (2.2.0)

org.apache.flink:flink-table-api-java MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.flink:flink-table-api-java and may be impacted: - com.datasqrl.flinkrunner:datagen-connectors 0.10.1 -...

com.couchbase.client.flink-connector-couchbase_2.12:flink-connector-couchbase_2.12 (0.5.0), com.datasqrl.flinkrunner:kafka-safe-connector (>=0.9.0-alpha1, <=0.9.0-alpha2) +32 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-api-java (>=2.1.0, <=2.1.1)

org.apache.flink:flink-table-api-java MAVEN version =2.1.0, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =0.5.1-1-flink-2.1, =26.0.0, =26.3.0 and more Source cves: CVE-2026-35194 Source advisory:...

com.couchbase.client.flink-connector-couchbase_2.12:flink-connector-couchbase_2.12 (0.5.0), com.datasqrl.flinkrunner:kafka-safe-connector (>=0.9.0-alpha1, <=0.9.0-alpha2) +32 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-api-java (>=2.1.0, <=2.1.1)

org.apache.flink:flink-table-api-java MAVEN version =2.1.0, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =0.5.1-1-flink-2.1, =26.0.0, =26.3.0 and more Source cves: CVE-2026-35194 Source advisory: OSV:GHSA-2F54-V4HM-FX73...

com.datasqrl.flinkrunner:datagen-connectors (0.10.1), com.datasqrl.flinkrunner:kafka-safe-connector (>=0.9.0, <=0.10.1) +80 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-api-java (2.2.0)

org.apache.flink:flink-table-api-java MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.flink:flink-table-api-java and may be impacted: - com.datasqrl.flinkrunner:datagen-connectors 0.10.1 -...

com.datasqrl.flinkrunner:datagen-connectors (0.10.1), com.datasqrl.flinkrunner:kafka-safe-connector (>=0.9.0, <=0.10.1) +80 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-api-java (2.2.0)

org.apache.flink:flink-table-api-java MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.flink:flink-table-api-java and may be impacted: - com.datasqrl.flinkrunner:datagen-connectors 0.10.1 -...

com.drobisch:flink-connector-elasticsearch-e2e-tests-common (>=4.0.0-serde-fixes, <=4.0.5-fault-tolerant), com.drobisch:flink-connector-elasticsearch6-e2e-tests (>=4.0.0-serde-fixes, <=4.0.5-fault-tolerant) +27 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-api-java (>=2.0.0, <=2.0.1)

org.apache.flink:flink-table-api-java MAVEN version =2.0.0, =4.0.0-serde-fixes, =4.0.0-serde-fixes, =4.0.0-serde-fixes, =26.0.0, =0.2.0, =6.0.0-2.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1 and more Source cves: CVE-2026-35194 Source advisory: OSV:GHSA-2F54-V4HM-FX73...

cn.ibizlab.plugin:ibiz-dataflow-flink (>=8.1.0.371, <=8.1.0.567.22), cn.sliew:flinkful-cli-descriptor-examples (>=1.0.2, <=1.0.7) +365 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-api-java (>=1.15.0, <=1.20.3)

org.apache.flink:flink-table-api-java MAVEN version =1.15.0, =8.1.0.371, =1.0.2, =1.0.2, =1.0.2, =1.0.2, =1.0.2, =1.0.3, =1.0.0, =1.0.2, =1.0.2, =0.5.0, =0.5.0, =1.4.0, =1.5.6.2 and more Source cves: CVE-2026-35194 Source advisory: GHSA-2F54-V4HM-FX73...

cn.ibizlab.plugin:ibiz-dataflow-flink (>=8.1.0.371, <=8.1.0.567.22), cn.sliew:flinkful-cli-descriptor-examples (>=1.0.2, <=1.0.7) +365 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-api-java (>=1.15.0, <=1.20.3)

org.apache.flink:flink-table-api-java MAVEN version =1.15.0, =8.1.0.371, =1.0.2, =1.0.2, =1.0.2, =1.0.2, =1.0.2, =1.0.3, =1.0.0, =1.0.2, =1.0.2, =0.5.0, =0.5.0, =1.4.0, =1.5.6.2 and more Source cves: CVE-2026-35194 Source advisory: OSV:GHSA-2F54-V4HM-FX73...

com.drobisch:flink-connector-elasticsearch-e2e-tests-common (>=4.0.0-serde-fixes, <=4.0.5-fault-tolerant), com.drobisch:flink-connector-elasticsearch6-e2e-tests (>=4.0.0-serde-fixes, <=4.0.5-fault-tolerant) +27 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-api-java (>=2.0.0, <=2.0.1)

org.apache.flink:flink-table-api-java MAVEN version =2.0.0, =4.0.0-serde-fixes, =4.0.0-serde-fixes, =4.0.0-serde-fixes, =26.0.0, =0.2.0, =6.0.0-2.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1 and more Source cves: CVE-2026-35194 Source advisory: GHSA-2F54-V4HM-FX73...

com.couchbase.client.flink-connector-couchbase_2.12:flink-connector-couchbase_2.12 (0.5.0), com.datasqrl.flinkrunner:kafka-safe-connector (>=0.9.0-alpha1, <=0.9.0-alpha2) +32 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-api-java (>=2.1.0, <=2.1.1)

org.apache.flink:flink-table-api-java MAVEN version =2.1.0, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =0.5.1-1-flink-2.1, =26.0.0, =26.3.0 and more Source cves: CVE-2026-35194 Source advisory: GHSA-2F54-V4HM-FX73...

CVE-2026-44714

The bitcoinj library is a Java implementation of the Bitcoin protocol. Prior to 0.17.1, ScriptExecution.correctlySpends contains two fast-path verification bugs for standard P2PKH and native P2WPKH spends in core/src/main/java/org/bitcoinj/script/ScriptExecution.java. In both branches, bitcoinj...

cn.ibizlab.plugin:ibiz-dataflow-flink (>=8.1.0.371, <=8.1.0.567.22), cn.sliew:flinkful-cli-descriptor-examples (>=1.0.2, <=1.0.7) +365 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-api-java (>=1.15.0, <=1.20.3)

org.apache.flink:flink-table-api-java MAVEN version =1.15.0, =8.1.0.371, =1.0.2, =1.0.2, =1.0.2, =1.0.2, =1.0.2, =1.0.3, =1.0.0, =1.0.2, =1.0.2, =0.5.0, =0.5.0, =1.4.0, =1.5.6.2 and more Source cves: CVE-2026-35194 Source advisory: MEND:CVE-2026-35194...

com.couchbase.client.flink-connector-couchbase_2.12:flink-connector-couchbase_2.12 (0.5.0), com.datasqrl.flinkrunner:kafka-safe-connector (>=0.9.0-alpha1, <=0.9.0-alpha2) +32 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-api-java (>=2.1.0, <=2.1.1)

org.apache.flink:flink-table-api-java MAVEN version =2.1.0, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =0.5.1-1-flink-2.1, =26.0.0, =26.3.0 and more Source cves: CVE-2026-35194 Source advisory: MEND:CVE-2026-35194...

com.drobisch:flink-connector-elasticsearch-e2e-tests-common (>=4.0.0-serde-fixes, <=4.0.5-fault-tolerant), com.drobisch:flink-connector-elasticsearch6-e2e-tests (>=4.0.0-serde-fixes, <=4.0.5-fault-tolerant) +27 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-api-java (>=2.0.0, <=2.0.1)

org.apache.flink:flink-table-api-java MAVEN version =2.0.0, =4.0.0-serde-fixes, =4.0.0-serde-fixes, =4.0.0-serde-fixes, =26.0.0, =0.2.0, =6.0.0-2.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1 and more Source cves: CVE-2026-35194 Source advisory: MEND:CVE-2026-35194...