de.javakaffee.msm:memcached-session-manager-tc8 (>=1.8.0, <=1.8.1), org.apache.tomcat:tomcat-catalina-ha (8.0.0-rc10) +2 more potentially affected by CVE-2026-43512 via org.apache.tomcat:tomcat-catalina (8.0.0-rc10)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.0-rc10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - de.javakaffee.msm:memcached-session-manager-tc8 =1.8.0, =1.8.1 -...

de.javakaffee.msm:memcached-session-manager-tc8 (>=1.8.2, <=1.9.0-rc1), org.apache.tomcat:tomcat-catalina-ha (8.0.5) +3 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (8.0.5)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - de.javakaffee.msm:memcached-session-manager-tc8 =1.8.2, =0.7, =0.15 Source cves: CVE-2026-435...

com.geetools.geemvc:geemvc (0.9.1-beta3), com.geetools.geemvc:geeticket-webapp-jpa-jsp (0.9.1-beta3) +8 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (8.0.35)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.35 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.geetools.geemvc:geemvc 0.9.1-beta3 - com.geetools.geemvc:geeticket-webapp-jpa-jsp...

de.javakaffee.msm:memcached-session-manager-tc8 (>=1.9.0, <=1.9.1), org.apache.tomcat:tomcat-catalina-ha (8.0.30) +7 more potentially affected by CVE-2026-42498 via org.apache.tomcat:tomcat-catalina (8.0.30)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.30 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - de.javakaffee.msm:memcached-session-manager-tc8 =1.9.0, =1.0.12, =1.5.11, =1.5.11, =1.5.11,...

de.javakaffee.msm:memcached-session-manager-tc8 (>=y, <=2.3.2), org.apache.tomcat:tomcat-catalina-ha (8.5.29) +7 more potentially affected by CVE-2026-43515 via org.apache.tomcat:tomcat-catalina (8.5.29)

org.apache.tomcat:tomcat-catalina MAVEN version 8.5.29 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - de.javakaffee.msm:memcached-session-manager-tc8 =y, =3.5.0, =3.5.0, =3.5.4 -...

de.javakaffee.msm:memcached-session-manager-tc8 (>=1.8.2, <=1.9.0-rc1), org.apache.tomcat:tomcat-catalina-ha (8.0.5) +3 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (8.0.5)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - de.javakaffee.msm:memcached-session-manager-tc8 =1.8.2, =0.7, =0.15 Source cves: CVE-2026-435...

com.geetools.geemvc:geemvc (0.9.1-beta3), com.geetools.geemvc:geeticket-webapp-jpa-jsp (0.9.1-beta3) +8 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (8.0.35)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.35 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - com.geetools.geemvc:geemvc 0.9.1-beta3 - com.geetools.geemvc:geeticket-webapp-jpa-jsp...

de.javakaffee.msm:memcached-session-manager (>=1.8.0, <=1.8.1), de.javakaffee.msm:memcached-session-manager-tc7 (>=1.7.0, <=1.8.1) +8 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (7.0.40)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.40 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - de.javakaffee.msm:memcached-session-manager =1.8.0, =1.7.0, =2.4, =2.5.3 Source cves:...

de.javakaffee.msm:memcached-session-manager-tc8 (>=1.8.0, <=1.8.1), org.apache.tomcat:tomcat-catalina-ha (8.0.0-rc10) +2 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (8.0.0-rc10)

org.apache.tomcat:tomcat-catalina MAVEN version 8.0.0-rc10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - de.javakaffee.msm:memcached-session-manager-tc8 =1.8.0, =1.8.1 -...

de.javakaffee.msm:memcached-session-manager (>=y, <=2.3.2), de.javakaffee.msm:memcached-session-manager-tc7 (>=y, <=2.3.2) +8 more potentially affected by CVE-2026-43514 via org.apache.tomcat:tomcat-catalina (7.0.85)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.85 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - de.javakaffee.msm:memcached-session-manager =y, =y, =2.3.0, =2.4.1 -...

de.javakaffee.msm:memcached-session-manager (>=1.8.0, <=1.8.1), de.javakaffee.msm:memcached-session-manager-tc7 (>=1.7.0, <=1.8.1) +8 more potentially affected by CVE-2026-41284 via org.apache.tomcat:tomcat-catalina (7.0.40)

org.apache.tomcat:tomcat-catalina MAVEN version 7.0.40 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-catalina and may be impacted: - de.javakaffee.msm:memcached-session-manager =1.8.0, =1.7.0, =2.4, =2.5.3 Source cves:...

CVE-2026-7818 pgAdmin 4: Unsafe deserialization (CWE-502) in file-backed session manager leads to remote code execution

Deserialization of untrusted data CWE-502 in pgAdmin 4 FileBackedSessionManager. The session manager performed unsafe deserialization of session-file contents using Python's standard object-serialization module before performing any HMAC integrity check. Any file dropped into the sessions directo...

CVE-2026-7818

CVE-2026-7818 affects pgAdmin 4: Unsafe deserialization in FileBackedSessionManager allows an authenticated user with write access to the sessions directory to craft a payload that could lead to operating-system level remote code execution under the pgAdmin process identity. The root cause is des...

CVE-2026-7818 pgAdmin 4: Unsafe deserialization (CWE-502) in file-backed session manager leads to remote code execution

Deserialization of untrusted data CWE-502 in pgAdmin 4 FileBackedSessionManager. The session manager performed unsafe deserialization of session-file contents using Python's standard object-serialization module before performing any HMAC integrity check. Any file dropped into the sessions directo...

CVE-2026-7551

HKUDS OpenHarness contains a remote code execution vulnerability in the /bridge slash command that allows remote senders accepted by configuration to execute arbitrary operating system commands. Attackers can invoke the /bridge spawn command with attacker-controlled command text that is forwarded...

CVE-2026-7551 HKUDS OpenHarness Remote Command Execution via /bridge Slash Command

HKUDS OpenHarness contains a remote code execution vulnerability in the /bridge slash command that allows remote senders accepted by configuration to execute arbitrary operating system commands. Attackers can invoke the /bridge spawn command with attacker-controlled command text that is forwarded...

Amazon Linux 2023 : amazon-ssm-agent (ALAS2023-2026-1499)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1499 advisory. cmd/go: bypass of flag sanitization can lead to arbitrary code execution CVE-2025-61731 cmd/go: unexpected code execution when invoking toolchain CVE-2025-68119 Tenable has extracted the...

de.javakaffee.msm:memcached-session-manager (>=1.8.0, <=1.8.1), de.javakaffee.msm:memcached-session-manager-tc7 (>=1.7.0, <=1.8.1) +6 more potentially affected by CVE-2026-24733 via org.apache.tomcat:tomcat-coyote (7.0.40)

org.apache.tomcat:tomcat-coyote MAVEN version 7.0.40 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-coyote and may be impacted: - de.javakaffee.msm:memcached-session-manager =1.8.0, =1.7.0, =1.8.1 - net.myrrix:myrrix-web...

de.javakaffee.msm:memcached-session-manager (>=1.8.2, <=1.9.0-rc1), de.javakaffee.msm:memcached-session-manager-tc7 (>=1.8.2, <=1.9.0-rc1) +28 more potentially affected by CVE-2026-24733 via org.apache.tomcat:tomcat-coyote (7.0.53)

org.apache.tomcat:tomcat-coyote MAVEN version 7.0.53 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-coyote and may be impacted: - de.javakaffee.msm:memcached-session-manager =1.8.2, =1.8.2, =1.9.0-rc1, =3.1.0, =1.6.0.1,...

de.javakaffee.msm:memcached-session-manager-tc8 (>=1.8.2, <=1.9.0-rc1), org.apache.tomcat:tomcat-catalina (8.0.5) +5 more potentially affected by CVE-2026-24733 via org.apache.tomcat:tomcat-coyote (8.0.5)

org.apache.tomcat:tomcat-coyote MAVEN version 8.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat:tomcat-coyote and may be impacted: - de.javakaffee.msm:memcached-session-manager-tc8 =1.8.2, =0.7, =0.15 Source cves: CVE-2026-24733...