CVE-2026-87289

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webserver-static-content. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attac...

com.buralotech.oss.identifier:buralotech-identifier-helidonmp (>=3.1.0, <=3.1.1), com.open-elements:recordstore-server (>=0.1.0, <=0.10.0) +46 more potentially affected by CVE-2026-87289 via io.helidon.webserver:helidon-webserver-static-content (>=4.0.0-m2, <=4.5.4)

io.helidon.webserver:helidon-webserver-static-content MAVEN version =4.0.0-m2, =3.1.0, =0.1.0, =1.15.0.516, =0.4.0, =1.2-rc4, =0.11, =1.0.0, =1.4.0, =1.0.0, =4.0.0-m2, =4.0.0-m2, =4.0.0-rc2, =4.0.0-m2, =4.5.4 and more Source cves: CVE-2026-87289 Source advisory:...

io.helidon:helidon-all (27.0.0-m1) potentially affected by CVE-2026-87289 via io.helidon.webserver:helidon-webserver-static-content (27.0.0-m1)

io.helidon.webserver:helidon-webserver-static-content MAVEN version 27.0.0-m1 is affected by a known vulnerability. The following packages have a transitive dependency on io.helidon.webserver:helidon-webserver-static-content and may be impacted: - io.helidon:helidon-all 27.0.0-m1 Source cves:...

CVE-2026-87289

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webserver-static-content. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attac...

CVE-2026-87289: Uncontrolled Resource Consumption

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webserver-static-content. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attac...