527 matches found
RLSA-2026:60215 Moderate: assertj-core security update
A rich and intuitive set of strongly-typed assertions to use for unit testing either with JUnit or TestNG. Security Fixes: assertj: AssertJ: Information disclosure and denial of service via XML External Entity XXE CVE-2026-24400 For more details about the security issues, including the impact, a...
CLSA-2026-1787668008 TuxCare security update for io.netty (6 CVEs)
TuxCare rebuilt 47 io.netty packages to address 6 CVEs. Fixed in 4.1.93.Final-tuxcare.3...
ALSA-2026:59372 Moderate: assertj-core security update
A rich and intuitive set of strongly-typed assertions to use for unit testing either with JUnit or TestNG. Security Fixes: assertj: AssertJ: Information disclosure and denial of service via XML External Entity XXE CVE-2026-24400 For more details about the security issues, including the impact, a...
JLSEC-2026-1375 Apache Avro Java SDK is Vulnerable to Code Injection
Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas. This issue affects Apache Avro Java SDK: all versions through 1.11.4 and version 1.12.0. Users are recommended to upgrade to version 1.12.1 o...
CVE-2026-76904: Improper Neutralization of Special Elements used in an SQL Command
GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerability is present when executing OGC Filters with PostGIS DataStore implementation: jsonArrayContains function; Requires...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization in the partition interceptor. An attacker can cause unauthorized modification or disclosure of message data by manipulating the message sending process. Remediation Upgrade...
Deserialization of Untrusted Data
Overview Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the deserialization. An attacker can execute arbitrary code or manipulate application behavior by supplying specially crafted input that is deserialized without proper validation. Details Serializati...
CLSA-2026-1787145317 TuxCare security update for org.springframework.data (4 CVEs)
TuxCare rebuilt 4 org.springframework.data packages to address 4 CVEs. Fixed in 3.4.13-tuxcare.1...
CLSA-2026-1787141079 TuxCare security update for log4j:log4j (1 CVE)
TuxCare rebuilt log4j:log4j to address 1 CVE. Fixed in 1.2.16-tuxcare.2...
CLSA-2026-1787115093 TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.0.20-tuxcare.1...
CLSA-2026-1787045999 TuxCare security update for io.netty (23 CVEs)
TuxCare rebuilt 47 io.netty packages to address 23 CVEs. Fixed in 4.1.135.Final-tuxcare.1...
CLSA-2026-1787036800 TuxCare security update for com.google.code.gson:gson (1 CVE)
TuxCare rebuilt com.google.code.gson:gson to address 1 CVE. Fixed in 2.2.4-tuxcare.1...
CLSA-2026-1786943805 TuxCare security update for org.apache.activemq (1 CVE)
TuxCare rebuilt 55 org.apache.activemq packages to address 1 CVE. Fixed in 2.37.0-tuxcare.1...
CLSA-2026-1786547487 TuxCare security update for org.springframework.pulsar (3 CVEs)
TuxCare rebuilt 6 org.springframework.pulsar packages to address 3 CVEs. Fixed in 1.2.13-tuxcare.1...
CLSA-2026-1786542819 TuxCare security update for com.mchange:mchange-commons-java (1 CVE)
TuxCare rebuilt com.mchange:mchange-commons-java to address 1 CVE. Fixed in 0.2.20-tuxcare.2...
CLSA-2026-1786540569 TuxCare security update for org.apache.avro (1 CVE)
TuxCare rebuilt 24 org.apache.avro packages to address 1 CVE. Fixed in 1.11.3-tuxcare.5...
CLSA-2026-1786423284 TuxCare security update for org.springframework (1 CVE)
TuxCare rebuilt 23 org.springframework packages to address 1 CVE. Fixed in 5.2.13.RELEASE-tuxcare.8...
CLSA-2026-1786379623 TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)
TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.0.17-tuxcare.1...