helidon vulnerabilities
CVEs whose affected-version data names the helidon package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
40 CVEsRSS
CVE-2026-101570Low· 3.7Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-http2)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-http2). Supported versions that are affected are 4.0.0-4.5.5. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2026-101571Medium· 5.6Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-idcs-mapper)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-idcs-mapper). Supported versions that are affected are 3.0.0-3.2.21 and 4.0.0-4.5.5. Difficult to exploit vulnerability allows low p…
CVE-2026-101569Medium· 6.5Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common-concurrency-limits)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common-concurrency-limits). Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated at…
CVE-2026-101568Medium· 5.3Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-health)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-health). Supported versions that are affected are 3.0.0-3.2.21, 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacke…
CVE-2026-101579High· 7.2Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-grpc-server)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-grpc-server). Supported versions that are affected are 3.0.0-3.2.21. Easily exploitable vulnerability allows unauthenticated attacker with network acce…
CVE-2026-101575Medium· 6.5Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA). Supported versions that are affected are 4.0.0-4.5.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to …
CVE-2026-101573Medium· 6.8Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-http-auth)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-http-auth). Supported versions that are affected are 3.0.0-3.2.21, 4.0.0-4.5.5 and 27.0.0. Difficult to exploit vulnerability allows…
CVE-2026-101572High· 7.5Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http2)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http2). Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker wit…
CVE-2026-101580Medium· 5.8Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-jwt)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-jwt). Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attac…
CVE-2026-101576Low· 3.7Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA). Supported versions that are affected are 4.0.0-4.5.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to …
CVE-2026-101574Medium· 6.9Vulnerability in the Helidon product of Oracle Fusion Middleware (component: OIDC)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: OIDC). Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access …
CVE-2026-101581Medium· 6.5Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-dns-resolver-round-robin)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-dns-resolver-round-robin). Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthent…
CVE-2026-101578Medium· 5.3Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-google-login)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-google-login). Supported versions that are affected are 4.0.0-4.5.5. Easily exploitable vulnerability allows unauthenticated attacke…
CVE-2026-101577Low· 3.1Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-cors)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-cors). Supported versions that are affected are 4.0.0-4.5.5. Difficult to exploit vulnerability allows unauthenticated attacker with network access via…
CVE-2026-101585High· 7.2Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-cors)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-cors). Supported versions that are affected are 3.0.0-3.2.21. Easily exploitable vulnerability allows unauthenticated attacker with network access via …
CVE-2026-101584Medium· 6.5Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-websocket)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-websocket). Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2026-101582Medium· 5.8Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-integrations-vault)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-integrations-vault). Supported versions that are affected are 4.0.0-4.5.5. Easily exploitable vulnerability allows unauthenticated attacker with networ…
CVE-2026-101587Medium· 5.3Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http1)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http1). Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker wit…
CVE-2026-101586Medium· 5.3Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient). Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netw…
CVE-2026-101583High· 7.0Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common-mapper)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common-mapper). Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Difficult to exploit vulnerability allows unauthenticated attacker wit…
CVE-2026-101590Critical· 9.1Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security). Supported versions that are affected are 4.0.0-4.5.5. Easily exploitable vulnerability allows unauthenticated attacker with net…
CVE-2026-101588Medium· 5.3Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket). Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acce…
CVE-2026-87289High· 7.5Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-static-content)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-static-content). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with …
CVE-2026-83488Medium· 5.4Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows low privileged attacker with netw…
CVE-2026-83480Medium· 5.3Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2026-83460Medium· 6.5Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to co…
CVE-2026-83459Medium· 5.3Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-media-multipart)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-media-multipart). Supported versions that are affected are 3.0.0-3.2.20. Easily exploitable vulnerability allows unauthenticated attacker with network …
CVE-2026-83458Medium· 5.3Vulnerability in the Helidon product of Oracle Fusion Middleware (component: JSON)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: JSON). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to c…
CVE-2026-83439High· 8.1Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-idcs-mapper)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-idcs-mapper). Supported versions that are affected are 3.0.0-3.2.20 and 4.0.0-4.5.4. Easily exploitable vulnerability allows low pri…
CVE-2026-83330High· 7.5Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…