# Maven Advisories. Every Maven Advisory we hold (Java · Kotlin), newest first. ## Records, newest first (an older page) - [NL Portal Backend Libraries: Unauthenticated form resolver forwards the privileged Objecten-API token to a caller-supplied URL (SSRF)](https://agentprime.io/advisories/GHSA-xm3x-9cfw-jhx4.md) `GHSA-xm3x-9cfw-jhx4`, `CVE-2026-55414` · Maven `nl.nl-portal:form`: affected `>=1.1.0, <3.0.4`, fixed in `3.0.4` · CVSS 5.3 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: Broken access control, Server-side request forgery (SSRF) - [Armeria: External Control of File Name or Path in xDS SDS DataSource](https://agentprime.io/advisories/GHSA-hgw6-8c77-v4gq.md) `GHSA-hgw6-8c77-v4gq`, `CVE-2026-11752` · Maven `com.linecorp.armeria:armeria-xds`: affected `<1.40.0`, fixed in `1.40.0` · CVSS 5.9 Medium · Not analysed yet · Published 18 Jun 2026 · Tags: Path traversal - [NL Portal Backend Libraries: Document contents remained downloadable by any logged-in user (incomplete fix of CVE-2026-49463)](https://agentprime.io/advisories/GHSA-jr45-52cw-69h5.md) `GHSA-jr45-52cw-69h5`, `CVE-2026-54683` · Maven `nl.nl-portal:documenten-api`: affected `<3.0.3`, fixed in `3.0.3` · CVSS 6.5 Medium · Not analysed yet · Published 18 Jun 2026 · Tags: Broken access control - [JLine3 Telnet server: Unauthenticated Remote Memory Exhaustion via Unbounded Telnet NEW-ENVIRON Variables](https://agentprime.io/advisories/GHSA-47qp-hqvx-6r3f.md) `GHSA-47qp-hqvx-6r3f`, `CVE-2026-56740` · Maven `org.jline:jline-remote-telnet`: affected `>=4.1.0, <4.2.1 || >=4.0.0, <4.0.16 || <3.30.14`, fixed in `4.2.1`, `4.0.16`, `3.30.14` · CVSS 7.5 High · Not analysed yet · Published 18 Jun 2026 · Tags: Denial of service - [JLine3 Telnet server: Unauthenticated Remote DoS via Unbounded Telnet NAWS Terminal Geometry](https://agentprime.io/advisories/GHSA-2r2c-cx56-8933.md) `GHSA-2r2c-cx56-8933`, `CVE-2026-56741` · Maven `org.jline:jline-remote-telnet`: affected `>=4.1.0, <4.2.1 || >=4.0.0, <4.0.16 || <3.30.14`, fixed in `4.2.1`, `4.0.16`, `3.30.14` · CVSS 7.5 High · Not analysed yet · Published 18 Jun 2026 · Tags: Denial of service - [Karate Mock Server RCE via embedded expression evaluation of request-derived data](https://agentprime.io/advisories/GHSA-2c85-rfcc-g74j.md) `GHSA-2c85-rfcc-g74j` · Maven `io.karatelabs:karate-core`: affected `>=2.0.1, <2.1.0`, fixed in `2.1.0` · CVSS 4.0, no score published · Not analysed yet · Published 18 Jun 2026 · Tags: Code injection - [Strimzi: Unrestricted access to all Secrets within namespace watched by the Topic operator](https://agentprime.io/advisories/GHSA-r427-j2h7-wv3m.md) `GHSA-r427-j2h7-wv3m`, `CVE-2026-55226` · Maven `io.strimzi:strimzi`: affected `<1.0.1`, fixed in `1.0.1` · CVSS 5.4 Medium · Not analysed yet · Published 18 Jun 2026 · Tags: Privilege escalation, CWE-272 - [Strimzi: Cross-namespace privilege escalation via \`Kafka.spec.entityOperator\`](https://agentprime.io/advisories/GHSA-mw9r-p8xp-wx96.md) `GHSA-mw9r-p8xp-wx96`, `CVE-2026-55225` · Maven `io.strimzi:strimzi`: affected `<1.0.1`, fixed in `1.0.1` · CVSS 8.0 High · Not analysed yet · Published 18 Jun 2026 · Tags: Privilege escalation, CWE-441 - [HAPI FHIR: XXE in XsltUtilities.saxonTransform via unhardened Saxon TransformerFactory](https://agentprime.io/advisories/GHSA-2f55-g35j-5jmf.md) `GHSA-2f55-g35j-5jmf`, `CVE-2026-55471` · Maven `ca.uhn.hapi.fhir:org.hl7.fhir.utilities`: affected `<6.9.10`, fixed in `6.9.10` · CVSS 8.7 High · Not analysed yet · Published 17 Jun 2026 · Tags: XML external entities (XXE) - [HAPI FHIR: Incomplete fix for CVE-2026-45367: DSTU2 FHIRPathEngine.matches() missing RegexTimeout protection allows ReDoS](https://agentprime.io/advisories/GHSA-fxj4-p9xp-37v5.md) `GHSA-fxj4-p9xp-37v5`, `CVE-2026-55470` · Maven `ca.uhn.hapi.fhir:org.hl7.fhir.convertors` and 3 more: affected `<6.9.10`, fixed in `6.9.10` · CVSS 7.5 High · Not analysed yet · Published 17 Jun 2026 · Tags: Denial of service - [handlebars.java FileTemplateLoader Path Traversal](https://agentprime.io/advisories/GHSA-r4gv-qr8j-p3pg.md) `GHSA-r4gv-qr8j-p3pg`, `CVE-2026-55760` · Maven `com.github.jknack:handlebars`: affected `<4.5.2`, fixed in `4.5.2` · CVSS 7.5 High · Not analysed yet · Published 17 Jun 2026 · Tags: Path traversal - [LangChain4j: SQL injection via metadata filters in langchain4j-mariadb and langchain4j-pgvector](https://agentprime.io/advisories/GHSA-2mfg-cc43-9pcj.md) `GHSA-2mfg-cc43-9pcj`, `CVE-2026-55405` · Maven `dev.langchain4j:langchain4j-mariadb` and 1 more: affected `<1.2.1-beta8 || >=1.3.0-beta9, <1.5.1-beta11 || >=1.6.0-beta12, <1.11.8-beta19 || >=1.12.1-beta21, <1.16.3-beta26`, fixed in `1.2.1-beta8`, `1.5.1-beta11`, `1.11.8-beta19`, `1.16.3-beta26` · CVSS 7.6 High · Not analysed yet · Published 17 Jun 2026 · Tags: SQL injection - [Apache Shiro: LDAP DN Injection in DefaultLdapRealm](https://agentprime.io/advisories/GHSA-x96m-rh44-vgv8.md) `GHSA-x96m-rh44-vgv8`, `CVE-2026-49268` · Maven `org.apache.shiro:shiro-core`: affected `<2.2.1 || >=3.0.0-alpha-0, <3.0.0-alpha-2`, fixed in `2.2.1`, `3.0.0-alpha-2` · CVSS 8.8 High · Not analysed yet · Published 17 Jun 2026 · Tags: Other injection - [Apache DolphinScheduler: An incorrect authorization vulnerability allows authenticated users to access alert instances associated with alert groups they do not have permission to access.](https://agentprime.io/advisories/GHSA-694g-j8pj-cjj5.md) `GHSA-694g-j8pj-cjj5`, `CVE-2026-47340` · Maven `org.apache.dolphinscheduler:dolphinscheduler-api`: affected `<3.4.2`, fixed in `3.4.2` · CVSS 6.5 Medium · Not analysed yet · Published 17 Jun 2026 · Tags: Information disclosure - [Apache DolphinScheduler: Incorrect Authorization vulnerability allows users to access workflow instance information belonging to projects they do not have permission to access.](https://agentprime.io/advisories/GHSA-wv7f-c794-82v6.md) `GHSA-wv7f-c794-82v6`, `CVE-2026-42357` · Maven `org.apache.dolphinscheduler:dolphinscheduler-api`: affected `<3.4.2`, fixed in `3.4.2` · CVSS 6.5 Medium · Not analysed yet · Published 17 Jun 2026 · Tags: Broken access control - [Apache DolphinScheduler: Incorrect Authorization vulnerability allows users with system login privileges to delete task definitions in unauthorized projects](https://agentprime.io/advisories/GHSA-wh3w-v6gj-fqh2.md) `GHSA-wh3w-v6gj-fqh2`, `CVE-2026-41280` · Maven `org.apache.dolphinscheduler:dolphinscheduler-api`: affected `<3.4.2`, fixed in `3.4.2` · CVSS 4.9 Medium · Not analysed yet · Published 17 Jun 2026 · Tags: Broken access control - [Apache DolphinScheduler: DataSource API Missing Authorization Check Leads to Arbitrary Data Source Metadata Disclosure](https://agentprime.io/advisories/GHSA-r989-cjhx-3v49.md) `GHSA-r989-cjhx-3v49`, `CVE-2026-32966` · Maven `org.apache.dolphinscheduler:dolphinscheduler-api`: affected `<3.4.2`, fixed in `3.4.2` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Jun 2026 · Tags: Broken access control - [Apache DolphinScheduler: The \`/v2\` experimental interface lacks permission checks](https://agentprime.io/advisories/GHSA-85g9-8j9g-p486.md) `GHSA-85g9-8j9g-p486`, `CVE-2026-32967` · Maven `org.apache.dolphinscheduler:dolphinscheduler-api`: affected `<3.4.2`, fixed in `3.4.2` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Jun 2026 · Tags: Broken access control - [Spring AI vector store metadata filtering to handle special characters in Elasticsearch, OpenSearch, and GemFire Vector Stores](https://agentprime.io/advisories/GHSA-cmwh-w62w-r2mf.md) `GHSA-cmwh-w62w-r2mf`, `CVE-2026-47835` · Maven `org.springframework.ai:spring-ai-elasticsearch-store` and 2 more: affected `>=1.0.0, <1.0.9 || >=1.1.0, <1.1.8`, fixed in `1.0.9`, `1.1.8` · CVSS 8.6 High · Not analysed yet · Published 15 Jun 2026 · Tags: Other injection - [SNMP4J-Agent allows a remote attacker to execute arbitrary code via the snmp4jCfgStoragePath component](https://agentprime.io/advisories/GHSA-7h7j-7vwp-cwfg.md) `GHSA-7h7j-7vwp-cwfg`, `CVE-2026-39006` · Maven `org.snmp4j:snmp4j-agent`: affected `<=3.8.3`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Jun 2026 · Tags: Path traversal, Broken access control, Insecure deserialization - [Spring Cloud Sleuth instrumentation of Spring TX DoS vulnerability](https://agentprime.io/advisories/GHSA-26m2-9g2q-v45q.md) `GHSA-26m2-9g2q-v45q`, `CVE-2026-41708` · Maven `org.springframework.cloud:spring-cloud-sleuth-instrumentation`: affected `>=3.1.0, <=3.1.11`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 15 Jun 2026 · Tags: Denial of service - [Netty susceptible to HTTP/2 Reset Attack with different on-the-wire signature](https://agentprime.io/advisories/GHSA-563q-j3cm-6jxm.md) `GHSA-563q-j3cm-6jxm`, `CVE-2026-50560` · Maven `io.netty:netty-codec-http2`: affected `>=4.2.0.Final, <4.2.15.Final || <4.1.135.Final`, fixed in `4.2.15.Final`, `4.1.135.Final` · CVSS 6.9 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Denial of service - [Netty: HttpObjectDecoder skips arbitrary initial control characters when only initial CRLF characters are permitted](https://agentprime.io/advisories/GHSA-hvcg-qmg6-jm4c.md) `GHSA-hvcg-qmg6-jm4c`, `CVE-2026-50020` · Maven `io.netty:netty-codec-http`: affected `>=4.2.0.Final, <4.2.15.Final || <4.1.135.Final`, fixed in `4.2.15.Final`, `4.1.135.Final` · CVSS 5.3 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: HTTP request smuggling - [Netty: Unbounded pre-allocation in RedisArrayAggregator from RESP array length](https://agentprime.io/advisories/GHSA-5w86-c3rq-vjj7.md) `GHSA-5w86-c3rq-vjj7`, `CVE-2026-50011` · Maven `io.netty:netty-codec-redis`: affected `>=4.2.0.Final, <4.2.15.Final || <4.1.135.Final`, fixed in `4.2.15.Final`, `4.1.135.Final` · CVSS 7.5 High · Not analysed yet · Published 15 Jun 2026 · Tags: Denial of service - [Netty: Wrapping plain trust manager silently disables hostname verification](https://agentprime.io/advisories/GHSA-c653-97m9-rcg9.md) `GHSA-c653-97m9-rcg9`, `CVE-2026-50010` · Maven `io.netty:netty-handler`: affected `>=4.2.0.Final, <4.2.15.Final || <4.1.135.Final`, fixed in `4.2.15.Final`, `4.1.135.Final` · CVSS 7.5 High · Not analysed yet · Published 15 Jun 2026 · Tags: Weak cryptography or TLS - [Netty: QUIC stateless reset token material exposed through header-visible connection IDs](https://agentprime.io/advisories/GHSA-cq4q-cv5g-r8q5.md) `GHSA-cq4q-cv5g-r8q5`, `CVE-2026-50009` · Maven `io.netty:netty-codec-classes-quic`: affected `>=4.2.0.Final, <4.2.15.Final`, fixed in `4.2.15.Final` · CVSS 4.8 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Information disclosure, Weak cryptography or TLS - [Netty HTTP/3 QPACK Blocked Streams Memory Exhaustion](https://agentprime.io/advisories/GHSA-4grm-h2qv-h6w6.md) `GHSA-4grm-h2qv-h6w6`, `CVE-2026-48748` · Maven `io.netty:netty-codec-http3`: affected `>=4.2.0.Final, <4.2.15.Final`, fixed in `4.2.15.Final` · CVSS 7.5 High · Not analysed yet · Published 15 Jun 2026 · Tags: Denial of service - [ConnectBot SSH Client Library: Excessive allocation and integer overflow in DER private-key parsing](https://agentprime.io/advisories/GHSA-vc8p-8pxg-rfwg.md) `GHSA-vc8p-8pxg-rfwg`, `CVE-2026-54697` · Maven `org.connectbot.sshlib:sshlib`: affected `<=0.3.0`, no fixed version yet · CVSS 6.7 Medium · Not analysed yet · Published 12 Jun 2026 · Tags: Memory corruption, Denial of service - [ConnectBot SSH Client Library: Unbounded SSH field lengths can cause excessive memory allocation](https://agentprime.io/advisories/GHSA-ch3q-cw5r-f4hg.md) `GHSA-ch3q-cw5r-f4hg`, `CVE-2026-54700` · Maven `org.connectbot.sshlib:sshlib`: affected `<=0.3.0`, no fixed version yet · CVSS 6.9 Medium · Not analysed yet · Published 12 Jun 2026 · Tags: Denial of service, CWE-20 - [Appsmith: Configuration-dependent origin validation bypass in password reset and email verification link generation](https://agentprime.io/advisories/GHSA-j9gf-vw2f-9hrw.md) `GHSA-j9gf-vw2f-9hrw` · Maven `com.appsmith:server`: affected `<2.0`, fixed in `2.0` · CVSS 8.1 High · Not analysed yet · Published 12 Jun 2026 · Tags: CWE-346, CWE-807 - [Appsmith Super User Creation Race Condition Allows Multiple Instance Administrators](https://agentprime.io/advisories/GHSA-9wcp-79g5-5c3c.md) `GHSA-9wcp-79g5-5c3c` · Maven `com.appsmith:server`: affected `<1.99`, fixed in `1.99` · CVSS 8.1 High · Not analysed yet · Published 12 Jun 2026 · Tags: Race condition - [GeoServer has a Server-Side Request Forgery (SSRF) Vulnerability in its XML Entity Resolution](https://agentprime.io/advisories/GHSA-x4r9-gmw3-hxww.md) `GHSA-x4r9-gmw3-hxww`, `CVE-2025-58175` · Maven `org.geoserver:gs-main` and 1 more: affected `<2.26.4 || >=2.27.0, <2.27.3`, fixed in `2.26.4`, `2.27.3` · CVSS 6.5 Medium · Not analysed yet · Published 12 Jun 2026 · Tags: XML external entities (XXE), Server-side request forgery (SSRF), CWE-20 - [GeoServer has an arbitrary file write vulnerability in its Master Password Dump Page](https://agentprime.io/advisories/GHSA-7qmg-grcp-qf25.md) `GHSA-7qmg-grcp-qf25`, `CVE-2025-52465` · Maven `org.geoserver.web:gs-web-app` and 1 more: affected `>=2.27.0, <2.27.3 || <2.26.4`, fixed in `2.27.3`, `2.26.4` · CVSS 7.2 High · Not analysed yet · Published 12 Jun 2026 · Tags: Path traversal - [Apache CXF JNDI Injection vulnerability in DispatchMDBMessageListenerImpl](https://agentprime.io/advisories/GHSA-qp3f-rvj8-46c8.md) `GHSA-qp3f-rvj8-46c8`, `CVE-2026-50633` · Maven `org.apache.cxf:cxf-integration-jca`: affected `>=4.2.0, <4.2.2 || <4.1.7`, fixed in `4.2.2`, `4.1.7` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Jun 2026 · Tags: Insecure deserialization, CWE-20 - [Apache cxf-core: No restriction on attachment headers per message](https://agentprime.io/advisories/GHSA-ghvc-7hp8-2g2v.md) `GHSA-ghvc-7hp8-2g2v`, `CVE-2026-50645` · Maven `org.apache.cxf:cxf-core`: affected `>=4.2.0, <4.2.2 || >=4.0.0, <4.1.7 || <3.6.12`, fixed in `4.2.2`, `4.1.7`, `3.6.12` · CVSS 7.5 High · Not analysed yet · Published 12 Jun 2026 · Tags: Denial of service - [Apache CXF has JNDI Injection Vulnerability in JMSConfigFactory](https://agentprime.io/advisories/GHSA-93g8-qqv3-mrx8.md) `GHSA-93g8-qqv3-mrx8`, `CVE-2026-50632` · Maven `org.apache.cxf:cxf-rt-transports-jms`: affected `>=4.2.0, <4.2.2 || >=4.1.0, <4.1.7 || <3.6.12`, fixed in `4.2.2`, `4.1.7`, `3.6.12` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Jun 2026 · Tags: Insecure deserialization, CWE-20 - [Apache CXF: WS JSON request filter trusts metadata from an unvalidated first signature entry](https://agentprime.io/advisories/GHSA-33j8-j763-4fv5.md) `GHSA-33j8-j763-4fv5`, `CVE-2026-50634` · Maven `org.apache.cxf:cxf-rt-rs-security-jose-jaxrs`: affected `>=4.2.0, <4.2.2 || <4.1.7`, fixed in `4.2.2`, `4.1.7` · CVSS 6.5 Medium · Not analysed yet · Published 12 Jun 2026 · Tags: Weak cryptography or TLS - [Apache CXF has Improper Restriction of XML External Entity Reference](https://agentprime.io/advisories/GHSA-xw5h-cmh3-8j6j.md) `GHSA-xw5h-cmh3-8j6j`, `CVE-2026-49875` · Maven `org.apache.cxf:cxf-core`: affected `>=4.2.0, <4.2.2 || >=4.0.0, <4.1.7 || <3.6.12`, fixed in `4.2.2`, `4.1.7`, `3.6.12` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Jun 2026 · Tags: XML external entities (XXE) - [Apache CXF OAuth2 HTTP Response Splitting via WWW-Authenticate Realm Injection](https://agentprime.io/advisories/GHSA-xf62-wr5p-5p95.md) `GHSA-xf62-wr5p-5p95`, `CVE-2026-50630` · Maven `org.apache.cxf:cxf-rt-rs-security-oauth2`: affected `>=4.2.0, <4.2.2 || <4.1.7`, fixed in `4.2.2`, `4.1.7` · CVSS 6.5 Medium · Not analysed yet · Published 12 Jun 2026 · Tags: Other injection - [Apache CXF OAuth2 has Inverted IP Binding Check that Defeats Security Control](https://agentprime.io/advisories/GHSA-g5v7-jchf-7jrr.md) `GHSA-g5v7-jchf-7jrr`, `CVE-2026-50628` · Maven `org.apache.cxf:cxf-rt-rs-security-oauth2`: affected `>=4.2.0, <4.2.2 || <4.1.7`, fixed in `4.2.2`, `4.1.7` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Jun 2026 · Tags: CWE-20, CWE-358 - [Apache CXF OAuth2 Log Injection via Unsanitized Client Identifier](https://agentprime.io/advisories/GHSA-f8p7-h97q-7vx7.md) `GHSA-f8p7-h97q-7vx7`, `CVE-2026-50629` · Maven `org.apache.cxf:cxf-rt-rs-security-oauth2`: affected `>=4.2.0, <4.2.2 || <4.1.7`, fixed in `4.2.2`, `4.1.7` · CVSS 8.2 High · Not analysed yet · Published 12 Jun 2026 · Tags: Other injection - [Apache CXF OAuth2 Missing JWT Audience and Issuer Validation in Access Token Validator](https://agentprime.io/advisories/GHSA-9mrv-8pvf-hf4m.md) `GHSA-9mrv-8pvf-hf4m`, `CVE-2026-50627` · Maven `org.apache.cxf:cxf-rt-rs-security-oauth2`: affected `>=4.2.0, <4.2.2 || <4.1.7`, fixed in `4.2.2`, `4.1.7` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Jun 2026 · Tags: Authentication bypass, CWE-289 - [Apache CXF OAuth2 TOCTOU Race Condition in Refresh Token Processing](https://agentprime.io/advisories/GHSA-83r6-96m8-r52p.md) `GHSA-83r6-96m8-r52p`, `CVE-2026-50631` · Maven `org.apache.cxf:cxf-rt-rs-security-oauth2`: affected `>=4.2.0, <4.2.2 || <4.1.7`, fixed in `4.2.2`, `4.1.7` · CVSS 7.4 High · Not analysed yet · Published 12 Jun 2026 · Tags: Race condition - [Apache CXF has Authentication Bypass in OAuth2 TokenIntrospectionService](https://agentprime.io/advisories/GHSA-542g-m3fx-q86f.md) `GHSA-542g-m3fx-q86f`, `CVE-2026-50623` · Maven `org.apache.cxf:cxf-rt-rs-security-oauth2`: affected `>=4.2.0, <4.2.2 || <4.1.7`, fixed in `4.2.2`, `4.1.7` · CVSS 6.5 Medium · Not analysed yet · Published 12 Jun 2026 · Tags: Authentication bypass - [GeoServer DB2 DataStore Extension has a JNDI Vulnerability via Store Connection](https://agentprime.io/advisories/GHSA-g628-r368-6vh7.md) `GHSA-g628-r368-6vh7`, `CVE-2025-27511` · Maven `org.geoserver.extension:gs-db2`: affected `<2.27.0`, fixed in `2.27.0` · CVSS 7.2 High · Not analysed yet · Published 11 Jun 2026 · Tags: Other injection, Insecure deserialization - [Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion](https://agentprime.io/advisories/GHSA-h2qv-fj59-j46j.md) `GHSA-h2qv-fj59-j46j`, `CVE-2026-48059` · Maven `io.netty:netty-codec-haproxy`: affected `>=4.2.0.Final, <4.2.15.Final || <4.1.135.Final`, fixed in `4.2.15.Final`, `4.1.135.Final` · CVSS 8.7 High · Not analysed yet · Published 11 Jun 2026 · Tags: Denial of service, CWE-1286 - [Keycloak Admin UI REST Extensions: bulk role-removal endpoints fail to perform granular permission checks](https://agentprime.io/advisories/GHSA-6w3v-mcfh-m3q7.md) `GHSA-6w3v-mcfh-m3q7`, `BIT-keycloak-2026-11986`, `CVE-2026-11986` · Maven `org.keycloak:keycloak-rest-admin-ui-ext`: affected `<26.7.0`, fixed in `26.7.0` · CVSS 4.9 Medium · Not analysed yet · Published 11 Jun 2026 · Tags: Broken access control - [netty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion](https://agentprime.io/advisories/GHSA-c2gf-v879-257j.md) `GHSA-c2gf-v879-257j`, `CVE-2026-48043` · Maven `io.netty:netty-codec-http2`: affected `<4.1.135.Final || >=4.2.0.Alpha1, <4.2.15.Final`, fixed in `4.1.135.Final`, `4.2.15.Final` · CVSS 5.3 Medium · Not analysed yet · Published 11 Jun 2026 · Tags: Denial of service - [netty-incubator-codec-ohttp's Incorrect Native Pointer Derivation in Pooled Direct ByteBuf Fallback Leads to Out-of-Bounds Native Memory Access](https://agentprime.io/advisories/GHSA-32hf-8jw3-v4qq.md) `GHSA-32hf-8jw3-v4qq`, `CVE-2026-48040` · Maven `io.netty.incubator:netty-incubator-codec-ohttp-hpke-native-boringssl`: affected `<0.0.22.Final`, fixed in `0.0.22.Final` · CVSS 6.8 Medium · Not analysed yet · Published 11 Jun 2026 · Tags: Memory corruption - [Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator](https://agentprime.io/advisories/GHSA-6jv9-x5w9-2ccm.md) `GHSA-6jv9-x5w9-2ccm`, `CVE-2026-48006` · Maven `io.netty:netty-codec-redis`: affected `>=4.2.0.Final, <4.2.15.Final || <4.1.135.Final`, fixed in `4.2.15.Final`, `4.1.135.Final` · CVSS 8.7 High · Not analysed yet · Published 11 Jun 2026 · Tags: Denial of service - [Spring Web Services: SSRF via unvalidated WS-Addressing reply destinations](https://agentprime.io/advisories/GHSA-whpp-xv3h-rwxf.md) `GHSA-whpp-xv3h-rwxf`, `CVE-2026-40999` · Maven `org.springframework.ws:spring-ws-core`: affected `>=5.0.0, <5.0.2 || >=4.1.0, <4.1.4 || >=4.0.0, <=4.0.18 || >=3.1.0, <=3.1.8`, fixed in `5.0.2`, `4.1.4` · CVSS 8.6 High · Not analysed yet · Published 11 Jun 2026 · Tags: Server-side request forgery (SSRF) - [Spring for GraphQL: Unsafe Deserialization](https://agentprime.io/advisories/GHSA-px92-q6rc-6mwv.md) `GHSA-px92-q6rc-6mwv`, `CVE-2026-41699` · Maven `org.springframework.graphql:spring-graphql`: affected `>=2.0.0, <2.0.4 || >=1.4.0, <1.4.6 || >=1.3.0, <=1.3.8`, fixed in `2.0.4`, `1.4.6` · CVSS 8.1 High · Not analysed yet · Published 11 Jun 2026 · Tags: Insecure deserialization - [Spring for GraphQL: Annotation Detection Vulnerability](https://agentprime.io/advisories/GHSA-phxq-526m-79px.md) `GHSA-phxq-526m-79px`, `CVE-2026-41856` · Maven `org.springframework.graphql:spring-graphql`: affected `>=2.0.0, <2.0.4 || >=1.4.0, <1.4.6 || >=1.3.0, <=1.3.8 || >=1.0.0, <=1.0.6`, fixed in `2.0.4`, `1.4.6` · CVSS 7.5 High · Not analysed yet · Published 11 Jun 2026 · Tags: Broken access control - [Spring Web Services: Inbound WS-Security allows RSA PKCS#1 v1.5 key transport by default](https://agentprime.io/advisories/GHSA-p7qj-2q5w-f9r7.md) `GHSA-p7qj-2q5w-f9r7`, `CVE-2026-40996` · Maven `org.springframework.ws:spring-ws-security`: affected `>=5.0.0, <5.0.2 || >=4.1.0, <4.1.4 || >=4.0.0, <=4.0.18 || >=3.1.0, <=3.1.8`, fixed in `5.0.2`, `4.1.4` · CVSS 4.8 Medium · Not analysed yet · Published 11 Jun 2026 · Tags: Weak cryptography or TLS - [Spring for GraphQL: Cross-Site WebSocket Hijacking](https://agentprime.io/advisories/GHSA-m39w-hqxx-3r48.md) `GHSA-m39w-hqxx-3r48`, `CVE-2026-41700` · Maven `org.springframework.graphql:spring-graphql`: affected `>=2.0.0, <2.0.4 || >=1.4.0, <1.4.6 || >=1.3.0, <=1.3.8 || >=1.0.0, <=1.0.6`, fixed in `2.0.4`, `1.4.6` · CVSS 8.1 High · Not analysed yet · Published 11 Jun 2026 · Tags: CWE-346 - [Spring Boot: Predictable Temp Directory in Artemis Auto-configuration](https://agentprime.io/advisories/GHSA-ggg2-9786-hwc8.md) `GHSA-ggg2-9786-hwc8`, `CVE-2026-41001` · Maven `org.springframework.boot:spring-boot-autoconfigure`: affected `>=4.0.0, <4.0.7 || >=3.5.0, <3.5.15 || >=3.4.0, <=3.4.16 || >=3.3.0, <=3.3.19 || >=2.7.0, <=2.7.33`, fixed in `4.0.7`, `3.5.15` · CVSS 5.3 Medium · Not analysed yet · Published 11 Jun 2026 · Tags: CWE-377 - [Spring Web Services: Wss4jSecurityInterceptor disables WS-I BSP validation by default](https://agentprime.io/advisories/GHSA-gg9r-wr4p-w63h.md) `GHSA-gg9r-wr4p-w63h`, `CVE-2026-40994` · Maven `org.springframework.ws:spring-ws-security`: affected `>=5.0.0, <5.0.2 || >=4.1.0, <4.1.4 || >=4.0.0, <=4.0.18 || >=3.1.0, <=3.1.8`, fixed in `5.0.2`, `4.1.4` · CVSS 8.2 High · Not analysed yet · Published 11 Jun 2026 · Tags: CWE-1188 - [Spring Web Services: WSS4J validation does not use configured replay cache](https://agentprime.io/advisories/GHSA-8qq9-r6cc-qjv9.md) `GHSA-8qq9-r6cc-qjv9`, `CVE-2026-41000` · Maven `org.springframework.ws:spring-ws-security`: affected `>=5.0.0, <5.0.2 || >=4.1.0, <4.1.4 || >=4.0.0, <=4.0.18 || >=3.1.0, <=3.1.8`, fixed in `5.0.2`, `4.1.4` · CVSS 3.7 Low · Not analysed yet · Published 11 Jun 2026 · Tags: Authentication bypass - [Spring Web Services: X.509 authentication bypasses Spring Security account checks](https://agentprime.io/advisories/GHSA-6mfm-98wv-32wm.md) `GHSA-6mfm-98wv-32wm`, `CVE-2026-40995` · Maven `org.springframework.ws:spring-ws-security`: affected `>=5.0.0, <5.0.2 || >=4.1.0, <4.1.4 || >=4.0.0, <=4.0.18 || >=3.1.0, <=3.1.8`, fixed in `5.0.2`, `4.1.4` · CVSS 5.4 Medium · Not analysed yet · Published 11 Jun 2026 · Tags: Authentication bypass - [Spring Web Services: SOAP security faults leak Spring Security account state](https://agentprime.io/advisories/GHSA-5x25-c2rf-f2jx.md) `GHSA-5x25-c2rf-f2jx`, `CVE-2026-40997` · Maven `org.springframework.ws:spring-ws-security`: affected `>=5.0.0, <5.0.2 || >=4.1.0, <4.1.4 || >=4.0.0, <=4.0.18 || >=3.1.0, <=3.1.8`, fixed in `5.0.2`, `4.1.4` · CVSS 5.3 Medium · Not analysed yet · Published 11 Jun 2026 · Tags: Information disclosure Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .