java

• CVE-2026-13500 - antlr ANTLR4 code injection 2026-06-29
• CVE-2026-13528 - YunaiV/zhijiantianya ruoyi-vue-pro path traversal 2026-06-29
• CVE-2026-25521 - versions from 2.0.12 to prototype pollution 2026-06-29
• CVE-2026-28367 - Undertow HTTP request smuggling 2026-06-29
• CVE-2026-28368 - Undertow HTTP request smuggling 2026-06-29
• CVE-2026-33228 - flatted security control bypass 2026-06-29
• CVE-2026-40993 - An attacker with write security control bypass 2026-06-29
• CVE-2026-41838 - IDs for WebSocket sessions security control bypass 2026-06-29
• CVE-2026-41848 - Applications may be vulnerable ReDoS 2026-06-29
• CVE-2026-41851 - Applications which accept user-supplied denial of service 2026-06-29
• CVE-2026-50193 - jackson-databind contains the general-purpose security control bypass 2026-06-29
• CVE-2026-53914 - JetBrains Kotlin unsafe deserialization 2026-06-29
• CVE-2026-13500 - ANTLR4 grammar action block code injection 2026-06-28
• CVE-2026-45051 - OpenAM WebAuthn deserialization RCE 2026-06-24
• CVE-2026-45052 - OpenAM Liberty Discovery authz bypass 2026-06-24
• CVE-2026-50193 - jackson-databind deeply nested JsonNode denial of service 2026-06-23
• CVE-2026-50193 - jackson-databind JsonNode deep nesting denial of service 2026-06-23
• CVE-2026-11746 - Central Dogma ZooKeeper replication secret cluster takeover 2026-06-22
• CVE-2026-40987 - Spring Integration remote file sync arbitrary write 2026-06-15
• CVE-2026-40994 - Spring WS BSP validation disabled by default 2026-06-15
• CVE-2026-40998 - Spring WS XPath XXE via StreamSource and SAXSource 2026-06-15
• CVE-2026-41003 - Spring Security generated form XSS 2026-06-15
• CVE-2026-41842 - Spring versioned resource resolution DoS 2026-06-15
• CVE-2026-41849 - Spring SpEL integer overflow DoS 2026-06-15
• CVE-2026-41850 - Spring SpEL algorithmic DoS 2026-06-15
• CVE-2026-44249 - Netty IPv6 subnet filter bypass 2026-06-14
• CVE-2026-44250 - Netty Redis array depth denial of service 2026-06-14
• CVE-2026-43515 - Apache Tomcat security constraints authorization bypass 2026-06-11
• CVE-2026-40993 - Spring Security JDBC SAML credential deserialization 2026-06-10
• CVE-2026-40993 - Spring Security SAML credential BLOB deserialization RCE 2026-06-10
• CVE-2026-47691 - Netty DNS bailiwick cache poisoning 2026-06-08
• CVE-2026-44632 - Yamcs Janino expression RCE 2026-06-07
• CVE-2026-45505 - Apache ActiveMQ Jolokia discovery wrapper bypass 2026-06-07
• CVE-2026-39852 - Quarkus matrix-parameter authorization bypass 2026-05-10
• CVE-2026-42779 - Apache MINA resolveClass deserialization RCE 2026-05-02
• CVE-2021-44228 — Log4Shell 2026-04-25
• Java ObjectInputStream and friends 2026-04-25