com.mchange/mchange-commons-java: mchange-commons-java: Arbitrary code execution via JNDI dereferencing of crafted objects

A flaw was found in mchange-commons-java, a Java utility library. An attacker can exploit this vulnerability by providing a maliciously crafted javax.naming.Reference or serialized object to an application using the library. This can provoke the application to download and execute arbitrary...

EUVD-2026-8683

mchange-commons-java: Remote Code Execution via JNDI Reference Resolution...

PT-2018-4556

Name of the Vulnerable Software and Affected Versions hapi versions prior to 11.1.4 Description The issue arises when server level, connection level, or route level CORS configurations in the hapi node module are combined, and a higher level config includes security restrictions, such as origin. ...