CVE-2026-13502

A flaw has been found in antlr ANTLR4 up to 4.13.2. This affects the function ObjectInputStream.readObject of the file antlr4-maven-plugin/src/main/java/org/antlr/mojo/antlr4/GrammarDependencies.java of the component Maven Plugin. This manipulation causes time-of-check time-of-use. The attack is...

CVE-2026-13502: Time-of-check Time-of-use (TOCTOU) Race Condition

A flaw has been found in antlr ANTLR4 up to 4.13.2. This affects the function ObjectInputStream.readObject of the file antlr4-maven-plugin/src/main/java/org/antlr/mojo/antlr4/GrammarDependencies.java of the component Maven Plugin. This manipulation causes time-of-check time-of-use. The attack is...

PT-2026-53113

A flaw has been found in antlr ANTLR4 up to 4.13.2. This affects the function ObjectInputStream.readObject of the file antlr4-maven-plugin/src/main/java/org/antlr/mojo/antlr4/GrammarDependencies.java of the component Maven Plugin. This manipulation causes time-of-check time-of-use. The attack is...

Linux Distros Unpatched Vulnerability : CVE-2026-13502

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in antlr ANTLR4 up to 4.13.2. This affects the function ObjectInputStream.readObject of the file...

Information Disclosure

Vaadin Maven Plugin and Vaadin Gradle Plugin are vulnerable to information disclosure. The vulnerability is due to the plugins logging the complete set of environment variables when the frontend build process fails with a non-zero exit status, which allows an attacker to obtain sensitive...

org.apache.camel.kafkaconnector:camel-servicenow-kafka-connector (0.1.0), org.apache.camel.maven:camel-servicenow-maven-plugin (>=2.25.0, <=3.1.0) +15 more potentially affected by CVE-2026-50634 via org.apache.cxf:cxf-rt-rs-security-jose-jaxrs (3.3.5)

org.apache.cxf:cxf-rt-rs-security-jose-jaxrs MAVEN version 3.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-jose-jaxrs and may be impacted: - org.apache.camel.kafkaconnector:camel-servicenow-kafka-connector 0.1.0 ...

org.apache.camel.maven:camel-servicenow-maven-plugin (>=2.23.4, <=2.24.2), org.apache.camel:camel-linkedin (>=2.23.4, <=2.24.2) +12 more potentially affected by CVE-2026-50634 via org.apache.cxf:cxf-rt-rs-security-jose-jaxrs (3.2.10)

org.apache.cxf:cxf-rt-rs-security-jose-jaxrs MAVEN version 3.2.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-jose-jaxrs and may be impacted: - org.apache.camel.maven:camel-servicenow-maven-plugin =2.23.4, =2.23.4,...

org.apache.camel.maven:camel-servicenow-maven-plugin (>=3.14.5, <=3.14.9), org.apache.camel.springboot:camel-servicenow-starter (>=3.14.5, <=3.14.9) +31 more potentially affected by CVE-2026-50634 via org.apache.cxf:cxf-rt-rs-security-jose-jaxrs (3.4.8)

org.apache.cxf:cxf-rt-rs-security-jose-jaxrs MAVEN version 3.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-jose-jaxrs and may be impacted: - org.apache.camel.maven:camel-servicenow-maven-plugin =3.14.5, =3.14.5,...

org.apache.camel.maven:camel-servicenow-maven-plugin (>=3.20.6, <=3.20.9), org.apache.camel.springboot:camel-servicenow-starter (>=3.20.6, <=3.20.9) +8 more potentially affected by CVE-2026-50634 via org.apache.cxf:cxf-rt-rs-security-jose-jaxrs (3.5.6)

org.apache.cxf:cxf-rt-rs-security-jose-jaxrs MAVEN version 3.5.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-jose-jaxrs and may be impacted: - org.apache.camel.maven:camel-servicenow-maven-plugin =3.20.6, =3.20.6,...

org.apache.camel.kafkaconnector:camel-servicenow-kafka-connector (0.1.0), org.apache.camel.maven:camel-servicenow-maven-plugin (>=2.25.0, <=3.1.0) +14 more potentially affected by CVE-2026-50623 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.3.5)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - org.apache.camel.kafkaconnector:camel-servicenow-kafka-connector 0.1.0 -...

io.fabric8.funktion.connector:connector-linkedin (>=1.1.9, <=1.1.55), io.fabric8.funktion.connector:connector-servicenow (>=1.1.9, <=1.1.55) +27 more potentially affected by CVE-2026-50623 via org.apache.cxf:cxf-rt-rs-security-oauth2 (3.1.8)

org.apache.cxf:cxf-rt-rs-security-oauth2 MAVEN version 3.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cxf:cxf-rt-rs-security-oauth2 and may be impacted: - io.fabric8.funktion.connector:connector-linkedin =1.1.9, =1.1.9, =1.1.55 -...

io.kokuwa.keycloak:keycloak-event-metrics (>=0.1.0, <=0.2.0), org.keycloak:keycloak-guides (21.0.1) +5 more potentially affected by CVE-2026-11986 via org.keycloak:keycloak-rest-admin-ui-ext (21.0.1)

org.keycloak:keycloak-rest-admin-ui-ext MAVEN version 21.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-rest-admin-ui-ext and may be impacted: - io.kokuwa.keycloak:keycloak-event-metrics =0.1.0, =0.2.0 -...

org.jenkins-ci.main:jenkins-test-harness (1.530), org.jenkins-ci.main:jenkins-war (1.530) +3 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.530)

org.jenkins-ci.main:jenkins-core MAVEN version 1.530 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.530 - org.jenkins-ci.main:jenkins-war 1.530 -...

org.jenkins-ci.main:jenkins-test-harness (1.414), org.jenkins-ci.main:jenkins-war (1.414) +5 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.414)

org.jenkins-ci.main:jenkins-core MAVEN version 1.414 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.414 - org.jenkins-ci.main:jenkins-war 1.414 -...

org.jenkins-ci.main:jenkins-test-harness (1.457), org.jenkins-ci.main:jenkins-war (1.457) +7 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.457)

org.jenkins-ci.main:jenkins-core MAVEN version 1.457 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.457 - org.jenkins-ci.main:jenkins-war 1.457 -...

org.bravo5.jenkins.plugins:vertx (>=1.0.0, <=1.0.1), org.jenkins-ci.main:jenkins-test-harness (1.482) +4 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.482)

org.jenkins-ci.main:jenkins-core MAVEN version 1.482 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.bravo5.jenkins.plugins:vertx =1.0.0, =1.0.1 - org.jenkins-ci.main:jenkins-test-harness 1.48...

org.jenkins-ci.main:jenkins-test-harness (1.446), org.jenkins-ci.main:jenkins-war (1.446) +5 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.446)

org.jenkins-ci.main:jenkins-core MAVEN version 1.446 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.446 - org.jenkins-ci.main:jenkins-war 1.446 -...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.3), org.jenkins-ci.main:jenkins-test-harness (1.520) +24 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.520)

org.jenkins-ci.main:jenkins-core MAVEN version 1.520 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - aendter.jenkins.plugins:filesystem-list-parameter-plugin =0.0.1, =1.0.4, =1.0.4, =1.0.4, =2.0,...

com.groupon.jenkins-ci.plugins:dotci (>=1.0.0, <=1.1.0), org.jenkins-ci.main:jenkins-test-harness (1.502) +5 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.502)

org.jenkins-ci.main:jenkins-core MAVEN version 1.502 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.groupon.jenkins-ci.plugins:dotci =1.0.0, =0.0.1, =0.0.7 - org.jenkins-ci.plugins:plugin 1.5...

org.jenkins-ci.main:jenkins-test-harness (1.514), org.jenkins-ci.main:jenkins-war (1.514) +6 more potentially affected by CVE-2026-53438 via org.jenkins-ci.main:jenkins-core (1.514)

org.jenkins-ci.main:jenkins-core MAVEN version 1.514 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.514 - org.jenkins-ci.main:jenkins-war 1.514 -...