jaxb-ri_core vulnerabilities

CVEs whose affected-version data names the jaxb-ri_core package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-92877High· 8.3

2w ago

The JAXB factory methods historically relied solely on `FEATURE_SECURE_PROCESSING` to prevent XML External Entity (XXE) resolution

The JAXB factory methods historically relied solely on `FEATURE_SECURE_PROCESSING` to prevent XML External Entity (XXE) resolution. On JAXP implementations where that feature alone does not block external entity resolution, an attacker w…

▾ TwilightEclipse Foundation · jaxb-ri (core)EPSS 0.27%via NVD