Amazon Linux 2023 : java-17-amazon-corretto, java-17-amazon-corretto-devel, java-17-amazon-corretto-headless (ALAS2023-2026-2098)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2098 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Ja...

Amazon Linux 2023 : java-11-amazon-corretto, java-11-amazon-corretto-devel, java-11-amazon-corretto-headless (ALAS2023-2026-2099)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2099 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Ja...

Amazon Linux 2023 : jackson-databind (ALAS2023-2026-2081)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2081 advisory. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.15.0 until 2.18.8, 2.21.4, and 3.1.4, Java Records using a...

CVE-2026-82604: Uncontrolled Recursion

A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the component Java Language Module. This manipulation causes uncontrolled recursion. Remote exploitation of the attack is possible. Upgrading to version 16.0 is recommended to address this issue. You should...

PT-2026-83675

A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the component Java Language Module. This manipulation causes uncontrolled recursion. Remote exploitation of the attack is possible. Upgrading to version 16.0 is recommended to address this issue. You should...

Medium: java-1.8.0-amazon-corretto

Issue Overview: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20...

Linux Distros Unpatched Vulnerability : CVE-2026-77310

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Prior to versions 2.18.9, 2.21.5, 2.22.1,...

PaperCut NG/MF Unsafe Reflection Vulnerability

PaperCut NG/MF contains an unsafe reflection vulnerability that allows an attacker to manipulate system configuration parameters and execute arbitrary Java bytecode residing on the application classpath under the security context of the PaperCut server process. This vulnerability can be chained...

Amazon Linux 2023 : java-26-amazon-corretto, java-26-amazon-corretto-devel, java-26-amazon-corretto-headless (ALAS2023-2026-2101)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2101 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Ja...

Amazon Linux 2 : java-11-amazon-corretto, --advisory ALAS2-2026-3879 (ALAS-2026-3879)

The version of java-11-amazon-corretto installed on the remote host is prior to 11.0.32+10-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3879 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition produc...

java-25-openjdk-25.0.4.1-1.1 on GA media (moderate)

java-25-openjdk-25.0.4.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:11621-1 Rating: moderate Cross-References: CVE-2026-60589 CVE-2026-61308 CVE-2026-70906 CVE-2026-70907 CVSS scores: CVE-2026-60589 SUSE : 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N CVE-2026-61308 SUSE : 6.8...

Incorrect Authorization

Overview org.pac4j:pac4j-core is a pac4j is an easy and powerful security engine for Java to authenticate users, get their profiles and manage authorizations in order to secure web applications and web services. Affected versions of this package are vulnerable to Incorrect Authorization in the...

Exploit for CVE-2026-81578

PaperCut CVE-2026-81578 + CVE-2026-82078 Defense Toolkit A...

Improper Certificate Validation

org.mariadb.jdbc:mariadb-java-client is vulnerable to Improper Certificate Validation. The vulnerability is due to improper certificate fingerprint validation during the initial TLS handshake, which allows an active man-in-the-middle attacker or malicious server to present a self-signed certifica...

OPENSUSE-SU-2026:11641-1 java-1_8_0-openj9-1.8.0.504-1.1 on GA media

These are all security issues fixed in the java-180-openj9-1.8.0.504-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11640-1 java-17-openj9-17.0.20.1-1.1 on GA media

These are all security issues fixed in the java-17-openj9-17.0.20.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11642-1 java-21-openj9-21.0.12.1-1.1 on GA media

These are all security issues fixed in the java-21-openj9-21.0.12.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11639-1 java-11-openj9-11.0.32.1-1.1 on GA media

These are all security issues fixed in the java-11-openj9-11.0.32.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:11643-1 java-25-openj9-25.0.4.1-1.1 on GA media

These are all security issues fixed in the java-25-openj9-25.0.4.1-1.1 package on the GA media of openSUSE Tumbleweed...

org.mariadb.jdbc:mariadb-java-client has Inappropriate Encoding for Output Context

Summary The connector encodes and decodes all character data assuming the connection character set is UTF-8. A server can change charactersetclient mid-session to a non-UTF-8 charset, after which the driver and server interpret the same bytes under different encodings, causing silent data...