org.http4k:http4k-client-apache (0.22.0), org.http4k:http4k-contract (0.22.0) +6 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (0.22.0)

org.http4k:http4k-core MAVEN version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 0.22.0 - org.http4k:http4k-contract 0.22.0 - org.http4k:http4k-format-argo 0.22.0 ...

org.http4k:http4k-client-apache (1.5.0), org.http4k:http4k-contract (1.5.0) +6 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (1.5.0)

org.http4k:http4k-core MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.5.0 - org.http4k:http4k-contract 1.5.0 - org.http4k:http4k-format-argo 1.5.0 -...

org.http4k:http4k-client-apache (1.10.0), org.http4k:http4k-contract (1.10.0) +6 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (1.10.0)

org.http4k:http4k-core MAVEN version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.10.0 - org.http4k:http4k-contract 1.10.0 - org.http4k:http4k-format-argo 1.10.0 ...

org.http4k:http4k-client-apache (1.11.0), org.http4k:http4k-contract (1.11.0) +6 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (1.11.0)

org.http4k:http4k-core MAVEN version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 1.11.0 - org.http4k:http4k-contract 1.11.0 - org.http4k:http4k-format-argo 1.11.0 ...

org.http4k:http4k-client-okhttp (1.26.0), org.http4k:http4k-format-argo (1.26.0) +3 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (1.26.0)

org.http4k:http4k-core MAVEN version 1.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-okhttp 1.26.0 - org.http4k:http4k-format-argo 1.26.0 - org.http4k:http4k-format-jackson...

org.http4k:http4k-aws (2.25.2), org.http4k:http4k-client-apache (2.25.2) +5 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (2.25.2)

org.http4k:http4k-core MAVEN version 2.25.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 2.25.2 - org.http4k:http4k-client-apache 2.25.2 - org.http4k:http4k-client-okhttp 2.25.2 -...

org.http4k:http4k-aws (2.26.3), org.http4k:http4k-contract (2.26.3) +1 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (2.26.3)

org.http4k:http4k-core MAVEN version 2.26.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 2.26.3 - org.http4k:http4k-contract 2.26.3 - org.http4k:http4k-template-handlebars 2.26.3...

org.http4k:http4k-client-apache (2.1.1), org.http4k:http4k-client-okhttp (2.1.1) +8 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (2.1.1)

org.http4k:http4k-core MAVEN version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-client-apache 2.1.1 - org.http4k:http4k-client-okhttp 2.1.1 - org.http4k:http4k-contract 2.1.1 -...

org.http4k:http4k-aws (3.22.3), org.http4k:http4k-client-apache (3.22.3) +10 more potentially affected by CVE-2026-53659 via org.http4k:http4k-core (3.22.3)

org.http4k:http4k-core MAVEN version 3.22.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.http4k:http4k-core and may be impacted: - org.http4k:http4k-aws 3.22.3 - org.http4k:http4k-client-apache 3.22.3 - org.http4k:http4k-client-apache-async 3.22...

CVE-2026-44845

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17, an authenticated administrator with Applet Host management and deployment permissions can inject Jinja2 expressions into the IP/Host field or Core Service Address field, causing...

CVE-2026-34399

FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, FreeCAD's BIM Workbench contains an eval call on untrusted data from SVG template files. When a user creates a TechDraw page from a malicious SVG template, arbitrary Python code executes. The vulnerable...

DEBIAN-CVE-2026-34399

FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, FreeCAD's BIM Workbench contains an eval call on untrusted data from SVG template files. When a user creates a TechDraw page from a malicious SVG template, arbitrary Python code executes. The vulnerable...

CVE-2026-34398

FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, src/Mod/BIM/bimcommands/BimProjectManager.py in the BIM Project Manager Load Template flow passes attacker-controlled FCStd Meta property values for wpposition, wpu, wpv, and wpaxis directly to eval,...

UBUNTU-CVE-2026-34399

FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, FreeCAD's BIM Workbench contains an eval call on untrusted data from SVG template files. When a user creates a TechDraw page from a malicious SVG template, arbitrary Python code executes. The vulnerable...

CVE-2026-34399

FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, FreeCAD's BIM Workbench contains an eval call on untrusted data from SVG template files. When a user creates a TechDraw page from a malicious SVG template, arbitrary Python code executes. The vulnerable...

UBUNTU-CVE-2026-34398

FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, src/Mod/BIM/bimcommands/BimProjectManager.py in the BIM Project Manager Load Template flow passes attacker-controlled FCStd Meta property values for wpposition, wpu, wpv, and wpaxis directly to eval,...

CVE-2026-44845 JumpServer: Remote Command Execution (RCE) via Jinja Template Injection in Applet Host Deployment

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17, an authenticated administrator with Applet Host management and deployment permissions can inject Jinja2 expressions into the IP/Host field or Core Service Address field, causing...

CVE-2026-44845 JumpServer: Remote Command Execution (RCE) via Jinja Template Injection in Applet Host Deployment

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17, an authenticated administrator with Applet Host management and deployment permissions can inject Jinja2 expressions into the IP/Host field or Core Service Address field, causing...

CVE-2026-44845 JumpServer: Remote Command Execution (RCE) via Jinja Template Injection in Applet Host Deployment

JumpServer is an open source bastion host and an operation and maintenance security audit system. Prior to 4.10.17, an authenticated administrator with Applet Host management and deployment permissions can inject Jinja2 expressions into the IP/Host field or Core Service Address field, causing...

CVE-2026-34398 FreeCAD: Arbitrary Code Execution via eval() on untrusted project file metadata in BIM Workbench

FreeCAD is a free and open-source multiplatform 3D parametric modeler. From 0.19 until 1.1.1, src/Mod/BIM/bimcommands/BimProjectManager.py in the BIM Project Manager Load Template flow passes attacker-controlled FCStd Meta property values for wpposition, wpu, wpv, and wpaxis directly to eval,...