18 matches found
AZL-111112 CVE-2026-116486 affecting package objenesis 3.3-1
Objenesis before 3.6 contains a type confusion vulnerability that allows code in one class loader to substitute objects into another by exploiting instantiator caching keyed on class name. When a shared ObjenesisStd instance caches instantiators by clazz.getName in ObjenesisBase.getInstantiatorOf...
4.5CVSS6AI score0.00135EPSS
SaveExploits0References1
20