EUVD-2022-2130

Malicious code in bioql PyPI...

CVE-2025-53192

Apache Commons OGNL (OGNL library) contains an improper neutralization of expression/command delimiters when using Ognl.getValue, allowing bypass of blocklisted dangerous classes and potentially enabling arbitrary code execution. Affected: OGNL engine across versions; impact noted as high (CVE-20...

berkano:bean-displaytag (>=20050615.234814 <=20050616.015551), berkano:berkano-util (>=20050725.114415 <=dev-20050723) +877 more potentially affected by CVE-2016-3093 via ognl:ognl (>=2.5.1 <=3.0.11)

ognl:ognl MAVEN version =2.5.1, =20050615.234814, =20050725.114415, =2.0, =1.0.1, =1.0.0, =1.0.1, =3.1.1, =1.0.0, =1.0.0, =2.0.0, =1.2.4, =3.0.1 - ca.stellardrift.guice-backport.extensions:guice-struts2 =5.0.1 and more Source cves: CVE-2016-3093 Source advisory: OSV:GHSA-383P-XQXX-RRMP...

CVE-2016-3093

Apache Struts 2.0.0 through 2.3.24.1 does not properly cache method references when used with OGNL before 3.0.12, which allows remote attackers to cause a denial of service block access to a web site via unspecified vectors...