jsonorg-fn1

json.org CVE-2022-45688 false negative The project illustrates CVE-2022-45688 in json.org -- there is a simple application XML2JSONConverter to read XML from input, convert it to JSON and pretty-print it to the console. Using malicious input, the application crashes with a stackoverflow. The test...

Docker_MCP_POC

Java vulnerable scan POC Minimal Maven project used to comp...

com.linecorp.armeria:armeria-tomcat8.0 (>=0.53.0, <=0.53.2), com.linecorp.armeria:armeria-tomcat8.0-shaded (>=0.53.0, <=0.53.2) +5 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (8.0.46)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.46 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.linecorp.armeria:armeria-tomcat8.0 =0.53.0, =0.53.0, =6.0.8, =6.0.12...

com.github.jsimone:webapp-runner (8.0.50.0), com.linecorp.armeria:armeria-tomcat8.0 (>=0.59.0, <=0.62.0) +4 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (8.0.50)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.50 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 8.0.50.0 -...

com.github.jsimone:webapp-runner (8.0.50.0), com.linecorp.armeria:armeria-tomcat8.0 (>=0.59.0, <=0.62.0) +4 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (8.0.50)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.50 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 8.0.50.0 -...

com.github.jsimone:webapp-runner (8.0.52.0), com.linecorp.armeria:armeria-tomcat8.0 (>=0.64.0, <=0.67.1) +4 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (8.0.52)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.52 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 8.0.52.0 -...

com.github.jsimone:webapp-runner (8.0.50.0), com.linecorp.armeria:armeria-tomcat8.0 (>=0.59.0, <=0.62.0) +4 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.0.50)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.50 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 8.0.50.0 -...

com.github.jsimone:webapp-runner (8.0.51.0), com.linecorp.armeria:armeria-tomcat8.0 (>=0.63.0, <=0.63.1) +3 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (8.0.51)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.51 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 8.0.51.0 -...

com.github.jsimone:webapp-runner (8.0.50.0), com.linecorp.armeria:armeria-tomcat8.0 (>=0.59.0, <=0.62.0) +4 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (8.0.50)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.50 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 8.0.50.0 -...

ch.cern:cerndb-sw-zkpolicy (1.0.1-21), cloud.metaapi.sdk:metaapi-common-java (>=1.0.0, <=1.0.1) +259 more potentially affected by CVE-2026-34478 via org.apache.logging.log4j:log4j-core (>=3.0.0-beta1, <=3.0.0-beta3)

org.apache.logging.log4j:log4j-core MAVEN version =3.0.0-beta1, =1.0.0, =0.0.2, =00.00.03, =1.0.6, =1.0.7, =1.0.0, =2.0.21, =1.0, =1.0.2 - com.frostphyr:customappender 1.1.0 and more Source cves: CVE-2026-34478 Source advisory: SNYK:JAVA-ORGAPACHELOGGINGLOG4J-15967739...

ai.ancf.lmos:arc-gemini-client (>=0.1.1, <=0.104.0), ai.bareun.tagger:bareun (>=1.0.0, <=1.4.3) +5544 more potentially affected by CVE-2025-55163 via io.grpc:grpc-netty-shaded (>=1.9.0, <=1.74.0)

io.grpc:grpc-netty-shaded MAVEN version =1.9.0, =0.1.1, =1.0.0, =0.0.23, =0.9.0, =0.37.0, =3.10.0.5, =1.11.4, =1.11.4, =0.2.7, =0.2.7, =1.3.3, =0.1.0, =24.9.0, =24.9.0, =25.10.7 and more Source cves: CVE-2025-55163 Source advisory: GHSA-PRJ3-CCX8-P6X4...

ai.ancf.lmos:arc-gemini-client (>=0.1.1, <=0.104.0), ai.bareun.tagger:bareun (>=1.0.0, <=1.4.3) +5544 more potentially affected by CVE-2025-55163 via io.grpc:grpc-netty-shaded (>=1.9.0, <=1.74.0)

io.grpc:grpc-netty-shaded MAVEN version =1.9.0, =0.1.1, =1.0.0, =0.0.23, =0.9.0, =0.37.0, =3.10.0.5, =1.11.4, =1.11.4, =0.2.7, =0.2.7, =1.3.3, =0.1.0, =24.9.0, =24.9.0, =25.10.7 and more Source cves: CVE-2025-55163 Source advisory: OSV:GHSA-PRJ3-CCX8-P6X4...

PT-2024-40854 · Git +1 · Xpdf

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several function calls, including ShadingImage::generateAxialBitmap,...

docker-client:RegistryAuthFuzzer: Security exception in com.spotify.docker.client.shaded.com.fasterxml.jackson.databind.util.TokenBuffer

Project: https://github.com/spotify/docker-client.git Detailed Report: https://oss-fuzz.com/testcase?key=4985997194297344 Project: docker-client Fuzzing Engine: libFuzzer Fuzz Target: RegistryAuthFuzzer Job Type: libfuzzerasandocker-client Platform Id: linux Crash Type: Security exception Crash...

SUSE CVE-2020-9546

FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig aka shaded hikari-config...

jackson-databind: Serialization gadgets in shaded-hikari-config

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

jackson-databind: Serialization gadgets in shaded-hikari-config

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

jackson-databind: Serialization gadgets in shaded-hikari-config

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

jackson-databind: Serialization gadgets in shaded-hikari-config

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

jackson-databind: Serialization gadgets in shaded-hikari-config

A flaw was found in jackson-databind 2.x in versions prior to 2.9.10.4. FasterXML jackson-databind 2.x mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...