com.hazelcast:hazelcast-client (3.4-ea), com.hazelcast:hazelcast-cloud (3.4-ea) +6 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.4-ea)

com.hazelcast:hazelcast MAVEN version 3.4-ea is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.4-ea - com.hazelcast:hazelcast-cloud 3.4-ea - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-build-utils (3.6.8), com.hazelcast:hazelcast-client (3.6.8) +15 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.6.8)

com.hazelcast:hazelcast MAVEN version 3.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-build-utils 3.6.8 - com.hazelcast:hazelcast-client 3.6.8 -...

com.hazelcast:hazelcast-client (3.3-ea2), com.hazelcast:hazelcast-cloud (3.3-ea2) +9 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.3-ea2)

com.hazelcast:hazelcast MAVEN version 3.3-ea2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.3-ea2 - com.hazelcast:hazelcast-cloud 3.3-ea2 -...

com.hazelcast:hazelcast-client (3.3.1), com.hazelcast:hazelcast-cloud (3.3.1) +12 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.3.1)

com.hazelcast:hazelcast MAVEN version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.3.1 - com.hazelcast:hazelcast-cloud 3.3.1 - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-client (3.2.4), com.hazelcast:hazelcast-cloud (3.2.4) +17 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.2.4)

com.hazelcast:hazelcast MAVEN version 3.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.2.4 - com.hazelcast:hazelcast-cloud 3.2.4 - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-client (3.2.5), com.hazelcast:hazelcast-cloud (3.2.5) +23 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.2.5)

com.hazelcast:hazelcast MAVEN version 3.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.2.5 - com.hazelcast:hazelcast-cloud 3.2.5 - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-client (3.3.5), com.hazelcast:hazelcast-cloud (3.3.5) +12 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.3.5)

com.hazelcast:hazelcast MAVEN version 3.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.3.5 - com.hazelcast:hazelcast-cloud 3.3.5 - com.hazelcast:hazelcast-hibernate...

com.hazelcast:hazelcast-client (3.3.2), com.hazelcast:hazelcast-cloud (3.3.2) +8 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.3.2)

com.hazelcast:hazelcast MAVEN version 3.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast:hazelcast-client 3.3.2 - com.hazelcast:hazelcast-cloud 3.3.2 - com.hazelcast:hazelcast-hibernate...

CVE-2026-97873 Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider

In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 PKCS5 scheme 1 and PKCS12 PBE families ran their password-based key derivation with an iteration count taken from untrusted input without bounding it, so a small input could dictate an arbitrary amount of work before...

CVE-2026-97873 Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider

In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 PKCS5 scheme 1 and PKCS12 PBE families ran their password-based key derivation with an iteration count taken from untrusted input without bounding it, so a small input could dictate an arbitrary amount of work before...

CVE-2026-97873 Legacy PBES1 and PKCS#12 PBE iteration count honoured unbounded in the raw JCA provider

In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 PKCS5 scheme 1 and PKCS12 PBE families ran their password-based key derivation with an iteration count taken from untrusted input without bounding it, so a small input could dictate an arbitrary amount of work before...

Linux Distros Unpatched Vulnerability : CVE-2026-97873

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bouncy Castle for Java before 1.86, the raw JCA provider's legacy PBES1 PKCS5 scheme 1 and PKCS12 PBE families ran their password-based key derivation with a...

JNDI Injection

Apache CXF is vulnerable to JNDI Injection. The vulnerability is due to insufficient validation of JCA deployment descriptor ra.xml or runtime activation parameters, which allows an attacker who can manipulate these inputs to inject malicious JNDI references and potentially execute arbitrary code...

CVE-2026-50633

A flaw was found in Apache CXF's JCA integration module. This Java Naming and Directory Interface JNDI Injection vulnerability allows for arbitrary code execution. A remote attacker could exploit this by manipulating the Java EE Connector Architecture JCA deployment descriptor ra.xml or runtime...

org.apache.cxf.systests:cxf-systests-uncategorized (3.2.13) potentially affected by CVE-2026-50633 via org.apache.cxf:cxf-integration-jca (3.2.13)

org.apache.cxf:cxf-integration-jca MAVEN version 3.2.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-integration-jca and may be impacted: - org.apache.cxf.systests:cxf-systests-uncategorized 3.2.13 Source cves: CVE-2026-50633 Sour...

GHSA-QP3F-RVJ8-46C8 Apache CXF JNDI Injection vulnerability in DispatchMDBMessageListenerImpl

A JNDI Injection vulnerability has been discovered in Apache CXF's JCA integration module, which can allow for code execution, if an attacker is able to manipulate the JCA deployment descriptor ra.xml or runtime activation parameters. Users are recommended to upgrade to versions 4.2.2 or 4.1.7,...

org.apache.cxf.systests:cxf-systests-uncategorized (2.5.4) potentially affected by CVE-2026-50633 via org.apache.cxf:cxf-integration-jca (2.5.4)

org.apache.cxf:cxf-integration-jca MAVEN version 2.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-integration-jca and may be impacted: - org.apache.cxf.systests:cxf-systests-uncategorized 2.5.4 Source cves: CVE-2026-50633 Source...

org.apache.cxf.systests:cxf-systests-uncategorized (3.5.1) potentially affected by CVE-2026-50633 via org.apache.cxf:cxf-integration-jca (3.5.1)

org.apache.cxf:cxf-integration-jca MAVEN version 3.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-integration-jca and may be impacted: - org.apache.cxf.systests:cxf-systests-uncategorized 3.5.1 Source cves: CVE-2026-50633 Source...

org.apache.cxf.systests:cxf-systests-uncategorized (3.0.2) potentially affected by CVE-2026-50633 via org.apache.cxf:cxf-integration-jca (3.0.2)

org.apache.cxf:cxf-integration-jca MAVEN version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-integration-jca and may be impacted: - org.apache.cxf.systests:cxf-systests-uncategorized 3.0.2 Source cves: CVE-2026-50633 Source...

org.apache.cxf.systests:cxf-systests-uncategorized (2.6.10) potentially affected by CVE-2026-50633 via org.apache.cxf:cxf-integration-jca (2.6.10)

org.apache.cxf:cxf-integration-jca MAVEN version 2.6.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-integration-jca and may be impacted: - org.apache.cxf.systests:cxf-systests-uncategorized 2.6.10 Source cves: CVE-2026-50633 Sour...