jsonorg-fn1

json.org CVE-2022-45688 false negative The project illustrates CVE-2022-45688 in json.org -- there is a simple application XML2JSONConverter to read XML from input, convert it to JSON and pretty-print it to the console. Using malicious input, the application crashes with a stackoverflow. The test...

com.github.mcollovati:hilla-shaded-deps (>=24.4.0-beta1, <=24.4.2), com.github.mcollovati:quarkus-hilla (>=24.4.0-beta1, <=24.4.2) +7 more potentially affected by CVE-2026-110737 via com.vaadin:vaadin (>=24.4.0, <=24.4.25)

com.vaadin:vaadin MAVEN version =24.4.0, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.4.0, =24.4.1, =24.4.25 Source cves: CVE-2026-110737 Source advisory: SNYK:JAVA-COMVAADIN-21755465...

com.github.mcollovati:hilla-shaded-deps (>=24.4.0-beta1, <=24.4.2), com.github.mcollovati:quarkus-hilla (>=24.4.0-beta1, <=24.4.2) +7 more potentially affected by CVE-2026-110737 via com.vaadin:vaadin (>=24.4.0, <=24.4.25)

com.vaadin:vaadin MAVEN version =24.4.0, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.4.0-beta1, =24.4.0, =24.4.1, =24.4.25 Source cves: CVE-2026-110737 Source advisory: MEND:CVE-2026-110737...

ch.admin.bit.jeap:jeap-messaging-glue-schema-registry (>=8.51.0, <=15.2.0), com.agorapulse:micronaut-amazon-awssdk-kinesis-worker (>=4.0.7, <=5.0.3) +105 more potentially affected by CVE-2026-45799 via com.squareup.wire:wire-runtime-jvm (5.2.0)

com.squareup.wire:wire-runtime-jvm MAVEN version 5.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime-jvm and may be impacted: - ch.admin.bit.jeap:jeap-messaging-glue-schema-registry =8.51.0, =4.0.7, =2.0.1, =3.0.14.0,...

Docker_MCP_POC

Java vulnerable scan POC Minimal Maven project used to comp...

com.github.aknuth:tomcatstarter (8.0.43.0), com.linecorp.armeria:armeria-tomcat8.0 (>=0.42.0, <=0.47.0) +3 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (8.0.43)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.43 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.aknuth:tomcatstarter 8.0.43.0 -...

com.github.aknuth:tomcatstarter (8.0.43.0), com.linecorp.armeria:armeria-tomcat8.0 (>=0.42.0, <=0.47.0) +3 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (8.0.43)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.43 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.aknuth:tomcatstarter 8.0.43.0 -...

com.linecorp.armeria:armeria-tomcat8.0 (>=0.53.0, <=0.53.2), com.linecorp.armeria:armeria-tomcat8.0-shaded (>=0.53.0, <=0.53.2) +5 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (8.0.46)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.46 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.linecorp.armeria:armeria-tomcat8.0 =0.53.0, =0.53.0, =6.0.8, =6.0.12...

com.github.jsimone:webapp-runner (8.0.50.0), com.linecorp.armeria:armeria-tomcat8.0 (>=0.59.0, <=0.62.0) +4 more potentially affected by CVE-2026-43515 via org.apache.tomcat.embed:tomcat-embed-core (8.0.50)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.50 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 8.0.50.0 -...

com.github.jsimone:webapp-runner (8.0.50.0), com.linecorp.armeria:armeria-tomcat8.0 (>=0.59.0, <=0.62.0) +4 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (8.0.50)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.50 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 8.0.50.0 -...

com.github.jsimone:webapp-runner (8.0.50.0), com.linecorp.armeria:armeria-tomcat8.0 (>=0.59.0, <=0.62.0) +4 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (8.0.50)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.50 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 8.0.50.0 -...

com.github.jsimone:webapp-runner (8.0.51.0), com.linecorp.armeria:armeria-tomcat8.0 (>=0.63.0, <=0.63.1) +3 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.0.51)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.51 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 8.0.51.0 -...

com.github.jsimone:webapp-runner (8.0.51.0), com.linecorp.armeria:armeria-tomcat8.0 (>=0.63.0, <=0.63.1) +3 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (8.0.51)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.51 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 8.0.51.0 -...

com.github.jsimone:webapp-runner (8.0.50.0), com.linecorp.armeria:armeria-tomcat8.0 (>=0.59.0, <=0.62.0) +4 more potentially affected by CVE-2026-42498 via org.apache.tomcat.embed:tomcat-embed-core (8.0.50)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.50 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 8.0.50.0 -...

com.github.jsimone:webapp-runner (8.0.51.0), com.linecorp.armeria:armeria-tomcat8.0 (>=0.63.0, <=0.63.1) +3 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (8.0.51)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.51 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 8.0.51.0 -...

com.github.jsimone:webapp-runner (8.0.51.0), com.linecorp.armeria:armeria-tomcat8.0 (>=0.63.0, <=0.63.1) +3 more potentially affected by CVE-2026-41284 via org.apache.tomcat.embed:tomcat-embed-core (8.0.51)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.51 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 8.0.51.0 -...

com.linecorp.armeria:armeria-tomcat8.0 (>=0.53.0, <=0.53.2), com.linecorp.armeria:armeria-tomcat8.0-shaded (>=0.53.0, <=0.53.2) +5 more potentially affected by CVE-2026-43514 via org.apache.tomcat.embed:tomcat-embed-core (8.0.46)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.46 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.linecorp.armeria:armeria-tomcat8.0 =0.53.0, =0.53.0, =6.0.8, =6.0.12...

com.github.jsimone:webapp-runner (8.0.50.0), com.linecorp.armeria:armeria-tomcat8.0 (>=0.59.0, <=0.62.0) +4 more potentially affected by CVE-2026-43513 via org.apache.tomcat.embed:tomcat-embed-core (8.0.50)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.50 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 8.0.50.0 -...

com.github.jsimone:webapp-runner (8.0.50.0), com.linecorp.armeria:armeria-tomcat8.0 (>=0.59.0, <=0.62.0) +4 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (8.0.50)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.50 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 8.0.50.0 -...

com.github.jsimone:webapp-runner (8.0.52.0), com.linecorp.armeria:armeria-tomcat8.0 (>=0.64.0, <=0.67.1) +4 more potentially affected by CVE-2026-43512 via org.apache.tomcat.embed:tomcat-embed-core (8.0.52)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version 8.0.52 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.tomcat.embed:tomcat-embed-core and may be impacted: - com.github.jsimone:webapp-runner 8.0.52.0 -...