CVE-2026-17459

CVE-2026-17459 affects SparkJava (up to 2.9.4), specifically the ExternalResourceHandler.java function staticFiles.externalLocation. The vulnerability enables symlink following via manipulations of the externalLocation path, with a remote attack surface. Exploitation is described as Proof-of-Conc...

CVE-2026-17459 perwendel spark SparkJava ExternalResourceHandler.jav staticFiles.externalLocation symlink

A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects the function staticFiles.externalLocation of the file src/main/java/spark/resource/ExternalResourceHandler.jav of the component SparkJava. Executing a manipulation can lead to symlink following. It is possib...

CVE-2026-17459 perwendel spark SparkJava ExternalResourceHandler.jav staticFiles.externalLocation symlink

A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects the function staticFiles.externalLocation of the file src/main/java/spark/resource/ExternalResourceHandler.jav of the component SparkJava. Executing a manipulation can lead to symlink following. It is possib...

CVE-2026-17459 perwendel spark SparkJava ExternalResourceHandler.jav staticFiles.externalLocation symlink

A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects the function staticFiles.externalLocation of the file src/main/java/spark/resource/ExternalResourceHandler.jav of the component SparkJava. Executing a manipulation can lead to symlink following. It is possib...

ECHO-C1A1-CB5B-E199 Kernel vulnerabilities are irrelevant in container environments.

Bulletin has no description...

ECHO-9DB0-DFD3-A7BB

Bulletin has no description...

MINI-J733-9JH8-C3CJ

Bulletin has no description...

GO-2026-5882 Oras-go: Blob upload vulnerable to credential forwarding via unvalidated Location header in oras.land/oras-go

Oras-go: Blob upload vulnerable to credential forwarding via unvalidated Location header in oras.land/oras-go...

CGA-7F54-J9QG-6RVJ

Bulletin has no description...

MINI-VQ69-5HH7-W767

Bulletin has no description...

MINI-R6F8-8VGJ-H623

Bulletin has no description...

MINI-45JR-RXQ2-96GV

Bulletin has no description...

ECHO-C564-8B04-5460

Bulletin has no description...

MINI-W9H3-W57C-HR6R

Bulletin has no description...

MINI-7CG9-H527-5X6X

Bulletin has no description...

MINI-6W2J-QJ7M-JH97

Bulletin has no description...

MINI-HQ97-5FVF-28Q4

Bulletin has no description...

MINI-FGGV-QQ4C-5RM3

Bulletin has no description...

CVE-2026-64875

Joomla Extension - regularlabs.com - IP spoofing vulnerability in GeoIP extension - GeoIP lookups trusted spoofable forwarded client-IP headers, this could cause GeoIP-rule bypass...

CVE-2026-63683

Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regular Labs conditions manager - IP and GeoIP conditions trusted spoofable forwarded headers, allowing remote clients to bypass location-based rules...