Tagged “maven”

▾ Midnightnetty · nettyEPSS 0.29%via NVD

Netty is a network application framework for development of protocol servers and clients

Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS respon…

CVE-2026-44250High· 7.5

▾ Twilightnetty · nettyEPSS 0.46%via NVD

Netty is a network application framework for development of protocol servers and clients

Netty is a network application framework for development of protocol servers and clients. In netty-codec-redis prior to versions 4.1.135.Final and 4.2.15.Final, an attacker can cause DoS by sending a crafted Redis payload with deeply nes…

CVE-2026-44890High· 7.5

▾ Twilightnetty · nettyEPSS 0.46%via NVD

Netty is a network application framework for development of protocol servers and clients

CVE-2026-48040Medium

▾ Sunlitnetty · io.netty.incubator:netty-incubator-codec-ohttp-hpke-native-boringsslEPSS 0.17%via GHSA

netty-incubator-codec-ohttp's Incorrect Native Pointer Derivation in Pooled Direct ByteBuf Fallback Leads to Out-of-Bounds Native Memory Access

CVE-2026-41731High· 8.1

▾ Twilightspringframework · org.springframework.kafka:spring-kafkaEPSS 0.51%via GHSA

In Spring for Apache Kafka, overly broad trusted-package matching in header mappers exposes JDK classes to deserialization

CVE-2026-41726Medium· 6.5

▾ Sunlitspringframework · org.springframework.kafka:spring-kafkaEPSS 0.30%via GHSA

In Spring for Apache Kafka, unbounded delegate cache keyed on user-controlled, potentially malicious selector header

CVE-2026-47838Medium· 6.8

▾ Sunlitspringframework · org.springframework.security:spring-security-webEPSS 0.13%via GHSA

Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates

CVE-2026-40984High· 7.5

▾ TwilightSpring · micrometer-coreEPSS 0.79%via NVD

In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition. Affected versions: micrometer-core 1.16.0 through 1.16.5; 1.15.0 through 1.15.11; 1.14.0 through 1.1…

In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition. Affected versions: micrometer-core 1.16.0 through 1.16.5; 1.15.0 through 1.15.11; 1.14.0 through 1.1…

CVE-2026-40983High· 7.5

▾ TwilightSpring · MicrometerEPSS 0.63%via NVD

In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service (DoS) condition. Affected versions: Micrometer 1.16.0 through 1.16.5; 1.15.0 through 1.15.11.

In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service (DoS) condition. Affected versions: Micrometer 1.16.0 through 1.16.5; 1.15.0 through 1.15.11.

CVE-2026-41855High· 8.1

▾ Twilightspringframework · org.springframework:spring-jmsEPSS 0.33%via NVD

In an untrusted JMS environment, org.springframework.jms.support.converter.MappingJackson2MessageConverter and org.springframework.jms.support.converter.JacksonJsonMessageConverter allow arbitrary class instantiation, which can lead to u…

In an untrusted JMS environment, org.springframework.jms.support.converter.MappingJackson2MessageConverter and org.springframework.jms.support.converter.JacksonJsonMessageConverter allow arbitrary class instantiation, which can lead to u…

CVE-2026-44892High· 7.5

▾ Twilightnetty · io.netty:netty-codec-http3EPSS 0.28%via GHSA

Netty has a Vulnerable Default Configuration Which Leads to Denial of Service via Unbounded HTTP/3 Header Size

CVE-2026-44894High· 7.5

▾ Twilightnetty · io.netty:netty-codec-classes-quicEPSS 0.14%via GHSA

Netty's Default QUIC token handler accepts any client-supplied token

CVE-2026-11400High· 8.0

▾ TwilightAWS · AWS Advanced JDBC WrapperEPSS 0.50%via CVEORG

Privilege Escalation in AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQL

An untrusted search path issue in the GlobalDatabasePlugin in the AWS Advanced JDBC Wrapper for Amazon Aurora PostgreSQL will allow a remote authenticated low-privilege actor to escalate privileges to those of another Amazon RDS user, in…

CVE-2026-47323Critical· 9.8PoC

▾ Abyssalapache · org.apache.camel:camel-cxf-restEPSS 20%via GHSA

Camel-CXF and Camel-Knative Message Header are Vulnerable to Injection via Missing Inbound Filtering

CVE-2026-44503High

▾ Twilightmicrosoft · com.microsoft.kiota:microsoft-kiota-abstractionsEPSS 0.64%via OSV

Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect

CVE-2026-42440High· 7.5

▾ Twilightapache · opennlpEPSS 0.60%via NVD

OOM Denial of Service via Unbounded Array Allocation in Apache OpenNLP AbstractModelReader Versions Affected: before 1.9.5 before 2.5.9 before 3.0.0-M3 Description: The AbstractModelReader methods getOutcomes(), getOutcomePatter…

OOM Denial of Service via Unbounded Array Allocation in Apache OpenNLP AbstractModelReader Versions Affected: before 1.9.5 before 2.5.9 before 3.0.0-M3 Description: The AbstractModelReader methods getOutcomes(), getOutcomePatter…

CVE-2026-42027Critical· 9.8⚖ disputed

▾ Midnightapache · opennlpEPSS 0.71%via NVD

Arbitrary Class Instantiation via Model Manifest in Apache OpenNLP ExtensionLoader Versions Affected: before 1.9.5, before 2.5.9, before 3.0.0-M3 Description: The ExtensionLoader.instantiateExtension(Class, String) method loa…

Arbitrary Class Instantiation via Model Manifest in Apache OpenNLP ExtensionLoader Versions Affected: before 1.9.5, before 2.5.9, before 3.0.0-M3 Description: The ExtensionLoader.instantiateExtension(Class, String) method loa…

CVE-2026-40682Critical· 9.1

▾ Midnightapache · opennlpEPSS 0.50%via NVD

XML External Entity (XXE) via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions Affected: before 2.5.9, before 3.0.0-M3 Description: The DictionaryEntryPersistor class initializes a static SAXParserFa…

XML External Entity (XXE) via Unsanitized Dictionary Parsing in Apache OpenNLP DictionaryEntryPersistor Versions Affected: before 2.5.9, before 3.0.0-M3 Description: The DictionaryEntryPersistor class initializes a static SAXParserFa…

CVE-2026-41603High· 7.4

▾ Twilightapache · thriftEPSS 0.57%via NVD

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift. This issue affects Apache Thrift: before 0.23.0. Users are recommended to upgrade to version 0.23.0, which fixes the issue.

CVE-2026-40048High· 7.8PoC

▾ Midnightapache · org.apache.camel:camel-pqcEPSS 0.33%via GHSA

Camel-PQC Vulnerable to Deserialization of Untrusted Data

CVE-2026-33454Critical· 9.4PoC

▾ AbyssalRed Hat · Red Hat build of Apache Camel 4 for Quarkus 3EPSS 1.5%via NVD

The Camel-Mail component is vulnerable to Camel message header injection

The Camel-Mail component is vulnerable to Camel message header injection. The custom header filter strategy used by the component (MailHeaderFilterStrategy) only filters the 'out' direction via setOutFilterStartsWith, while it does not c…

CVE-2026-40453Critical· 9.9PoC

▾ AbyssalRed Hat · OpenShift ServerlessEPSS 2.1%via NVD

The fix for CVE-2025-27636 added setLowerCase(true) to HttpHeaderFilterStrategy so that case-variant header names such as 'CAmelExecCommandExecutable' are filtered out alongside 'CamelExecCommandExecutable'

The fix for CVE-2025-27636 added setLowerCase(true) to HttpHeaderFilterStrategy so that case-variant header names such as 'CAmelExecCommandExecutable' are filtered out alongside 'CamelExecCommandExecutable'. The same setLowerCase(true) c…

CVE-2026-5598High· 7.5

▾ TwilightLegion of the Bouncy Castle Inc. · coreEPSS 0.90%via NVD

Covert timing channel vulnerability in Legion of the Bouncy Castle Inc

Covert timing channel vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA core on all (core modules). This vulnerability is associated with program files FrodoEngine.Java. This issue affects BC-JAVA: from 1.71 before 1.80.2, f…

CVE-2026-0636Medium· 6.5

▾ SunlitLegion of the Bouncy Castle Inc. · bcprovEPSS 0.53%via NVD

Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the Bouncy Castle Inc

Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (prov modules). This vulnerability is associated with program files LDAPStoreH…

CVE-2025-14813High· 7.5

▾ TwilightLegion of the Bouncy Castle Inc. · bcprovEPSS 0.32%via NVD

: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc

: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcprov on all (core modules). This vulnerability is associated with program files G3413CTRBlockCipher. This issue affects B…

CVE-2026-37980Medium· 6.9