offsec-osgi-exploits

OSGi Exploits This repository contains exploits for multiple OSGi versions. OSGi v3.7.2 and Below OSGi v3.8-3.20...

VUL4J-23

Apache Sling Bringing Back the Fun! Apache Sling is a web framework that uses a Java Content Repository, such as Apache Jackrabbit, to store and manage content. Sling applications use either scripts or Java servlets, selected based on simple name conventions, to process HTTP requests in a RESTful...

org.bouncycastle:bcmail-jdk14 (>=1.71, <=1.85), org.xhtmlrenderer:flying-saucer-examples (>=9.2.0, <=9.3.2) +4 more potentially affected by CVE-2026-17508 via org.bouncycastle:bcpkix-jdk14 (>=1.71, <=1.85)

org.bouncycastle:bcpkix-jdk14 MAVEN version =1.71, =1.71, =9.2.0, =9.2.0, =9.2.0, =9.2.0, =9.2.0, =9.3.2 Source cves: CVE-2026-17508 Source advisory: MEND:CVE-2026-17508...

org.apache.sshd:apache-sshd (>=3.0.0-m1, <=3.0.0-m5) potentially affected by CVE-2026-77185 via org.apache.sshd:sshd-osgi (>=3.0.0-m1, <=3.0.0-m5)

org.apache.sshd:sshd-osgi MAVEN version =3.0.0-m1, =3.0.0-m1, =3.0.0-m5 Source cves: CVE-2026-77185 Source advisory: MEND:CVE-2026-77185...

biz.aqute:biz.aqute.shell.sshd.provider (>=1.3.0, <=1.10.0), ch.admin.bit.jeap:jeap-archrepo-docgen (>=2.10.0, <=15.13.0) +1009 more potentially affected by CVE-2026-77185 via org.apache.sshd:sshd-osgi (>=2.2.0, <=2.19.0)

org.apache.sshd:sshd-osgi MAVEN version =2.2.0, =1.3.0, =2.10.0, =1.10.0, =1.10.0, =1.15.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =3.26.0, =3.26.0, =3.26.0, =3.26.0, =1.6.0, =1.7.0 and more Source cves: CVE-2026-77185 Source advisory: MEND:CVE-2026-77185...

org.apache.sshd:apache-sshd (>=3.0.0-m1, <=3.0.0-m5) potentially affected by CVE-2026-93994 via org.apache.sshd:sshd-osgi (>=3.0.0-m1, <=3.0.0-m5)

org.apache.sshd:sshd-osgi MAVEN version =3.0.0-m1, =3.0.0-m1, =3.0.0-m5 Source cves: CVE-2026-93994 Source advisory: MEND:CVE-2026-93994...

biz.aqute:biz.aqute.shell.sshd.provider (>=1.3.0, <=1.10.0), ch.admin.bit.jeap:jeap-archrepo-docgen (>=2.10.0, <=15.13.0) +1009 more potentially affected by CVE-2026-93994 via org.apache.sshd:sshd-osgi (>=2.2.0, <=2.19.0)

org.apache.sshd:sshd-osgi MAVEN version =2.2.0, =1.3.0, =2.10.0, =1.10.0, =1.10.0, =1.15.0, =1.10.0, =1.10.0, =1.10.0, =1.10.0, =3.26.0, =3.26.0, =3.26.0, =3.26.0, =1.6.0, =1.7.0 and more Source cves: CVE-2026-93994 Source advisory: MEND:CVE-2026-93994...

org.apache.activemq:artemis-features (>=2.31.1, <=2.33.0) potentially affected by CVE-2026-101292 via org.apache.activemq:artemis-jms-client-osgi (>=2.31.1, <=2.33.0)

org.apache.activemq:artemis-jms-client-osgi MAVEN version =2.31.1, =2.31.1, =2.33.0 Source cves: CVE-2026-101292 Source advisory: MEND:CVE-2026-101292...

org.apache.activemq:artemis-features (>=2.31.1, <=2.33.0) potentially affected by CVE-2026-101292 via org.apache.activemq:artemis-core-client-osgi (>=2.31.1, <=2.33.0)

org.apache.activemq:artemis-core-client-osgi MAVEN version =2.31.1, =2.31.1, =2.33.0 Source cves: CVE-2026-101292 Source advisory: MEND:CVE-2026-101292...

net.corda.corda-flows:corda-flows.corda.cpk (5.0.0-devpreview), net.corda:corda-application-internal (5.0.0-devpreview) +5 more potentially affected by CVE-2026-101292 via org.apache.activemq:artemis-server-osgi (>=2.17.0, <=2.33.0)

org.apache.activemq:artemis-server-osgi MAVEN version =2.17.0, =2.31.1, =2.33.0 Source cves: CVE-2026-101292 Source advisory: MEND:CVE-2026-101292...

CVE-2026-92230

Apache Karaf's XmlUtils cached XML parser/transformer factories in static ThreadLocal fields on long-lived container threads. Because a ThreadLocal value outlives the OSGi bundle that created it, repeated bundle or feature install, update, or refresh operations can leave successive bundle...

EUVD-2026-82394

Apache Karaf's XmlUtils cached XML parser/transformer factories in static ThreadLocal fields on long-lived container threads. Because a ThreadLocal value outlives the OSGi bundle that created it, repeated bundle or feature install, update, or refresh operations can leave successive bundle...

CVE-2026-92230 Apache Karaf: Improper release of ClassLoader references via static ThreadLocal caching

Apache Karaf's XmlUtils cached XML parser/transformer factories in static ThreadLocal fields on long-lived container threads. Because a ThreadLocal value outlives the OSGi bundle that created it, repeated bundle or feature install, update, or refresh operations can leave successive bundle...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.3.1) +5 more potentially affected by CVE-2026-74761 via org.apache.activemq:activemq-all (>=6.0.0, <=6.3.1)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.3.1 Source cves: CVE-2026-74761 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-19653597...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.3.1) +5 more potentially affected by CVE-2026-74761 via org.apache.activemq:activemq-all (>=6.0.0, <=6.3.1)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.3.1 Source cves: CVE-2026-74761 Source advisory: MEND:CVE-2026-74761...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.7) +5 more potentially affected by CVE-2026-59878 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.7)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.7 Source cves: CVE-2026-59878 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-19351877...

org.apache.activemq:activemq-osgi (>=6.0.0, <=6.2.7), org.apache.activemq:activemq-rar (>=6.0.0, <=6.2.7) +1 more potentially affected by CVE-2026-59878 via org.apache.activemq:activemq-amqp (>=6.0.0, <=6.2.7)

org.apache.activemq:activemq-amqp MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.7 Source cves: CVE-2026-59878 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-19351886...

org.apache.activemq:activemq-osgi (>=6.0.0, <=6.2.7), org.apache.activemq:activemq-rar (>=6.0.0, <=6.2.7) +1 more potentially affected by CVE-2026-61487 via org.apache.activemq:activemq-amqp (>=6.0.0, <=6.2.7)

org.apache.activemq:activemq-amqp MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.7 Source cves: CVE-2026-61487 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-19352102...

org.apache.activemq:activemq-osgi (>=6.0.0, <=6.2.7), org.apache.activemq:activemq-rar (>=6.0.0, <=6.2.7) +1 more potentially affected by CVE-2026-59878 via org.apache.activemq:activemq-amqp (>=6.0.0, <=6.2.7)

org.apache.activemq:activemq-amqp MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.7 Source cves: CVE-2026-59878 Source advisory: MEND:CVE-2026-59878...

com.espertech:esperio-springjms (9.0.0), org.apache.activemq.tooling:activemq-maven-plugin (>=6.0.0, <=6.2.7) +5 more potentially affected by CVE-2026-59878 via org.apache.activemq:activemq-all (>=6.0.0, <=6.2.7)

org.apache.activemq:activemq-all MAVEN version =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.0.0, =6.2.7 Source cves: CVE-2026-59878 Source advisory: MEND:CVE-2026-59878...