build_of_openjdk vulnerabilities
CVEs whose affected-version data names the build_of_openjdk package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
6 CVEsRSS
CVE-2026-91333Low· 3.7openjdk: Improve ciphertext handling (Oracle CPU 2026-10) (CVE-2026-91333)
A flaw was found in the Security component of Oracle Java SE. An unauthenticated remote attacker with network access could exploit this flaw by supplying crafted input to exposed application programming interfaces (APIs) or by executing un…
CVE-2026-91381Low· 3.7openjdk: Enhance Font Rendering (Oracle CPU 2026-10) (CVE-2026-91381)
A flaw was found in OpenJDK. This vulnerability allows an unauthenticated remote attacker to cause unauthorized data modification or deletion by submitting untrusted input to APIs in the 2D graphics component. Exploitation can occur throug…
CVE-2026-91396Medium· 6.5openjdk: Improve Pack200 handling (Oracle CPU 2026-10) (CVE-2026-91396)
A flaw was found in the Utility component of OpenJDK. An unauthenticated remote attacker can exploit this vulnerability by supplying untrusted data to component APIs over the network. A successful attack can allow unauthorized modification…
CVE-2026-91395Medium· 6.5openjdk: Enhance Pack200 unpacking (Oracle CPU 2026-10) (CVE-2026-91395)
A flaw was found in the Utility component of Java SE and GraalVM. An unauthenticated remote attacker with network access could exploit this vulnerability by submitting crafted data to exposed application programming interfaces (APIs). A su…
CVE-2026-91417Medium· 5.3openjdk: Enhance CORBA (Oracle CPU 2026-10) (CVE-2026-91417)
A flaw was found in the Common Object Request Broker Architecture (CORBA) component of OpenJDK. An unauthenticated remote attacker could exploit this flaw by sending specially crafted data to exposed application programming interfaces (API…
CVE-2026-47058High· 7.4Vulnerability in Oracle Java SE (component: Scripting)
Vulnerability in Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf and 11.0.31. Difficult to exploit vulnerability allows unauthenticated attacker with network access via …