com.jgeppert.struts2.bootstrap:struts2-bootstrap-showcase (>=6.0.0, <=6.1.0), com.jgeppert.struts2.jquery:struts2-jquery-grid-showcase (>=6.0.0, <=6.1.0) +4 more potentially affected by CVE-2026-73633 via org.apache.struts:struts2-json-plugin (>=7.0.0, <=7.2.1)

org.apache.struts:struts2-json-plugin MAVEN version =7.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =7.0.0, =7.0.0, =7.2.1 Source cves: CVE-2026-73633 Source advisory: MEND:CVE-2026-73633...

CVE-2026-73633 Apache Struts: Unbounded read of a JSON request body

Uncontrolled resource consumption vulnerability in the JSON plugin of Apache Struts. When an application is configured to populate actions from a JSON request body, the plugin reads that body into memory without bounding how much it will accept, so a single request can exhaust the heap and deny...

CVE-2026-73633

Uncontrolled resource consumption vulnerability in the JSON plugin of Apache Struts. When an application is configured to populate actions from a JSON request body, the plugin reads that body into memory without bounding how much it will accept, so a single request can exhaust the heap and deny...

EUVD-2026-58662

Uncontrolled resource consumption vulnerability in the JSON plugin of Apache Struts. When an application is configured to populate actions from a JSON request body, the plugin reads that body into memory without bounding how much it will accept, so a single request can exhaust the heap and deny...

Malicious code in @zalastax/nolb-json-e (npm)

The package @zalastax/nolb-json-e was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in @zalastax/nolb-json-k (npm)

The package @zalastax/nolb-json-k was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in @zalastax/nolb-json-r (npm)

The package @zalastax/nolb-json-r was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in @zalastax/nolb-json (npm)

The package @zalastax/nolb-json was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in @zalastax/nolb-json-z (npm)

The package @zalastax/nolb-json-z was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in @zalastax/nolb-json-w (npm)

The package @zalastax/nolb-json-w was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in @zalastax/nolb-json-m (npm)

The package @zalastax/nolb-json-m was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in @zalastax/nolb-json-s (npm)

The package @zalastax/nolb-json-s was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in @zalastax/nolb-json-c (npm)

The package @zalastax/nolb-json-c was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in @zalastax/nolb-json-j (npm)

The package @zalastax/nolb-json-j was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in @zalastax/nolb-json-x (npm)

The package @zalastax/nolb-json-x was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in @zalastax/nolb-json-n (npm)

The package @zalastax/nolb-json-n was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in @zalastax/nolb-json-o (npm)

The package @zalastax/nolb-json-o was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in @zalastax/nolb-json-g (npm)

The package @zalastax/nolb-json-g was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in @zalastax/nolb-json-t (npm)

The package @zalastax/nolb-json-t was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in @zalastax/nolb-json-f (npm)

The package @zalastax/nolb-json-f was found to contain malicious code. --- Credit: OpenSSF source...