# Maven Advisories. Every Maven Advisory we hold (Java · Kotlin), newest first. ## Records, newest first (an older page) - [Yamcs: Insecure Direct Object Reference (IDOR) in PacketsApi allows unprivileged users to dump all telemetry packets](https://agentprime.io/advisories/GHSA-8xjq-pr36-ccgf.md) `GHSA-8xjq-pr36-ccgf`, `CVE-2026-55548` · Maven `org.yamcs:yamcs-core`: affected `>=5.13.0, <5.13.2 || <5.12.8`, fixed in `5.13.2`, `5.12.8` · CVSS 4.3 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Broken access control - [Yamcs's Missing Authorization on Role and Privilege Enumeration Endpoints Allows Any Authenticated User to Disclose Full Security Configuration](https://agentprime.io/advisories/GHSA-cvw4-55pp-3hfq.md) `GHSA-cvw4-55pp-3hfq`, `CVE-2026-55547` · Maven `org.yamcs:yamcs-core`: affected `>=5.13.0, <5.13.2 || <5.12.8`, fixed in `5.13.2`, `5.12.8` · CVSS 4.3 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Broken access control - [Yamcs's WebSocket subscription handlers omit the privilege checks their REST siblings enforce](https://agentprime.io/advisories/GHSA-fwww-cp23-7f5g.md) `GHSA-fwww-cp23-7f5g`, `CVE-2026-55545` · Maven `org.yamcs:yamcs-core`: affected `<5.12.8 || >=5.13.0, <5.13.2`, fixed in `5.12.8`, `5.13.2` · CVSS 6.5 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Broken access control - [Yamcs Core API has Multiple Missing Function Level Access Control vulnerabilities](https://agentprime.io/advisories/GHSA-962x-ccwf-8x6p.md) `GHSA-962x-ccwf-8x6p`, `CVE-2026-55521` · Maven `org.yamcs:yamcs-core`: affected `>=5.13.0, <5.13.2 || <5.12.8`, fixed in `5.13.2`, `5.12.8` · CVSS 8.8 High · Not analysed yet · Published 28 Aug 2026 · Tags: Broken access control - [Yamcs vulnerable to authenticated RCE via StreamSQL aggregate-compiler column-name injection in Yamcs \`executeSql\`](https://agentprime.io/advisories/GHSA-3g44-3m7x-cgg2.md) `GHSA-3g44-3m7x-cgg2`, `CVE-2026-55511` · Maven `org.yamcs:yamcs-core`: affected `>=5.13.0, <5.13.2 || <5.12.8`, fixed in `5.13.2`, `5.12.8` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Code injection - [Spring Framework Improper Path Limitation in XsltView](https://agentprime.io/advisories/GHSA-pc63-qcmh-9cmg.md) `GHSA-pc63-qcmh-9cmg`, `CVE-2026-47884` · Maven `org.springframework:spring-webmvc`: affected `<=5.2.25.RELEASE || >=5.3.0, <=5.3.49 || >=6.0.0, <=6.0.30 || >=6.1.0, <=6.1.28 || >=6.2.0, <=6.2.19 || >=7.0.0, <7.0.9`, fixed in `7.0.9` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Path traversal - [Spring Framework Server Sent Event stream corruption while rendering fragments](https://agentprime.io/advisories/GHSA-j9f9-w8pj-32f8.md) `GHSA-j9f9-w8pj-32f8`, `CVE-2026-47890` · Maven `org.springframework:spring-webflux` and 1 more: affected `>=6.2.0, <=6.2.19 || >=7.0.0, <7.0.9`, fixed in `7.0.9` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Other injection - [Spring Framework Header Predicate Bypass in WebFlux Functional Endpoints](https://agentprime.io/advisories/GHSA-9qf2-26p9-2q2q.md) `GHSA-9qf2-26p9-2q2q`, `CVE-2026-47892` · Maven `org.springframework:spring-webflux`: affected `>=5.2.5.RELEASE, <=5.2.25.RELEASE || >=5.3.0, <=5.3.49 || >=6.0.0, <=6.0.30 || >=6.1.0, <=6.1.28 || >=6.2.0, <=6.2.19 || >=7.0.0, <7.0.9`, fixed in `7.0.9` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Aug 2026 · Tags: Broken access control - [AsyncHttpClient stores cookie for an unrelated domain (cookie tossing) via ThreadSafeCookieStore](https://agentprime.io/advisories/GHSA-m452-q8c9-rg2f.md) `GHSA-m452-q8c9-rg2f`, `CVE-2026-55688` · Maven `org.asynchttpclient:async-http-client`: affected `>=3.0.0.Beta1, <3.0.11 || >=2.0.0, <2.16.0`, fixed in `3.0.11`, `2.16.0` · CVSS 4.0 Medium · Not analysed yet · Published 26 Aug 2026 · Tags: CWE-1275 - [IzPack has Path Traversal in UnpackerBase that allows writing files outside the installation directory via malicious pack entries](https://agentprime.io/advisories/GHSA-f63g-88cj-hjf9.md) `GHSA-f63g-88cj-hjf9`, `CVE-2026-54550` · Maven `org.codehaus.izpack:izpack-installer`: affected `<5.2.7`, fixed in `5.2.7` · CVSS 7.4 High · Not analysed yet · Published 26 Aug 2026 · Tags: Path traversal - [http4s has HTTP/2 Denial of Service with Ember Backend](https://agentprime.io/advisories/GHSA-vmm3-xgcx-67hm.md) `GHSA-vmm3-xgcx-67hm`, `CVE-2026-54556` · Maven `org.http4s:http4s-ember-core_2.12` and 2 more: affected `<0.23.35`, fixed in `0.23.35` · CVSS 8.2 High · Not analysed yet · Published 26 Aug 2026 · Tags: CWE-409 - [Apache Tomcat's FORM authentication process has an Incorrect Authorization vulnerability](https://agentprime.io/advisories/GHSA-h3x4-894j-xpx5.md) `GHSA-h3x4-894j-xpx5`, `BIT-tomcat-2026-68525`, `CVE-2026-68525` · Maven `org.apache.tomcat.embed:tomcat-embed-core` and 2 more: affected `>=11.0.0-M1, <11.0.25 || >=10.1.0-M1, <10.1.58 || >=9.0.0-M1, <9.0.121 || >=8.5.0, <=8.5.100 || >=7.0.0, <=7.0.109`, fixed in `11.0.25`, `10.1.58`, `9.0.121` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Broken access control - [Apache Tomcat has an Improper Access Control, Incorrect Authorization vulnerability](https://agentprime.io/advisories/GHSA-gcx9-497g-6cp6.md) `GHSA-gcx9-497g-6cp6`, `BIT-tomcat-2026-65182`, `CVE-2026-65182` · Maven `org.apache.tomcat.embed:tomcat-embed-core` and 2 more: affected `>=11.0.0-M1, <11.0.25 || >=10.1.0-M1, <10.1.58 || >=9.0.0-M1, <9.0.121 || >=8.5.0, <=8.5.100 || >=7.0.0, <=7.0.109`, fixed in `11.0.25`, `10.1.58`, `9.0.121` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Broken access control - [Apache Tomcat - HTTP/2 no-authority bypass of strict SNI validation](https://agentprime.io/advisories/GHSA-f525-44xv-f2qj.md) `GHSA-f525-44xv-f2qj`, `BIT-tomcat-2026-65637`, `CVE-2026-65637` · Maven `org.apache.tomcat.embed:tomcat-embed-core` and 1 more: affected `>=11.0.20, <11.0.25 || >=10.1.53, <10.1.59 || >=9.0.115, <9.0.121`, fixed in `11.0.25`, `10.1.59`, `9.0.121` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: CWE-20 - [Apache Tomcat's DIGEST authenticator has an Authentication Bypass by Capture-replay vulnerability](https://agentprime.io/advisories/GHSA-9xv2-5v5q-p794.md) `GHSA-9xv2-5v5q-p794`, `BIT-tomcat-2026-65905`, `CVE-2026-65905` · Maven `org.apache.tomcat.embed:tomcat-embed-core` and 2 more: affected `>=11.0.0-M1, <11.0.25 || >=10.1.0-M1, <10.1.58 || >=9.0.0.M1, <9.0.121 || >=8.5.0, <=8.5.100 || >=7.0.30, <=7.0.109`, fixed in `11.0.25`, `10.1.58`, `9.0.121` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Aug 2026 · Tags: Authentication bypass - [Sakai Profile Image Deletion has an IDOR](https://agentprime.io/advisories/GHSA-9284-fjc3-fmmj.md) `GHSA-9284-fjc3-fmmj`, `CVE-2026-54050` · Maven `org.sakaiproject.profile2:profile2-api` and 1 more: affected `>=23.0, <23.5 || >=25.0, <=25.2`, fixed in `23.5` · CVSS 6.5 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Broken access control - [Sakai Conversations has a Stored XSS Issue](https://agentprime.io/advisories/GHSA-w2x5-gv52-9ccv.md) `GHSA-w2x5-gv52-9ccv`, `CVE-2026-54049` · Maven `org.sakaiproject.conversations:sakai-conversations-impl` and 2 more: affected `>=23.0, <=23.3`, no fixed version yet · CVSS 8.7 High · Not analysed yet · Published 24 Aug 2026 · Tags: Cross-site scripting (XSS) - [Apache Camel-Undertow: the endpoint discarded the undertow-specific header filter strategy in favour of the base HTTP one, so the undertow filtering never ran on endpoint-configured routes](https://agentprime.io/advisories/GHSA-v7h8-xhh6-gfj4.md) `GHSA-v7h8-xhh6-gfj4`, `CVE-2026-78329` · Maven `org.apache.camel:camel-undertow`: affected `>=4.11.0, <4.14.9 || >=4.15.0, <4.18.4 || >=4.19.0, <4.22.0`, fixed in `4.14.9`, `4.18.4`, `4.22.0` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Aug 2026 · Tags: CWE-20 - [Apache Camel-Knative: CloudEvent extension fields received in structured content mode were mapped onto message headers without applying any header filter strategy](https://agentprime.io/advisories/GHSA-vvwm-3j43-7pfm.md) `GHSA-vvwm-3j43-7pfm`, `CVE-2026-63621` · Maven `org.apache.camel:camel-knative`: affected `>=3.15.0, <4.14.9 || >=4.15.0, <4.18.4 || >=4.19.0, <4.22.0`, fixed in `4.14.9`, `4.18.4`, `4.22.0` · CVSS 5.3 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Other injection, CWE-20 - [Apache Camel-Atmosphere-Websocket: WebSocket dispatch header injection - the producer selected its target peers through Exchange headers whose names sat outside the filtered Camel namespace](https://agentprime.io/advisories/GHSA-m5r8-w65q-8wjf.md) `GHSA-m5r8-w65q-8wjf`, `CVE-2026-71300` · Maven `org.apache.camel:camel-atmosphere-websocket`: affected `>=4.0.0, <4.14.9 || >=4.15.0, <4.18.4 || >=4.19.0, <4.22.0`, fixed in `4.14.9`, `4.18.4`, `4.22.0` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Aug 2026 · Tags: CWE-20 - [Apache Camel-platform-http-main: when JWT authentication was configured with a keystore but no issuer or audience, the iss and aud claims were never validated, so any unexpired token signed by a trusted key was accepted](https://agentprime.io/advisories/GHSA-fpm2-m4qq-wghr.md) `GHSA-fpm2-m4qq-wghr`, `CVE-2026-66908` · Maven `org.apache.camel:camel-platform-http-main`: affected `>=4.8.0, <4.22.0`, fixed in `4.22.0` · CVSS 7.5 High · Not analysed yet · Published 24 Aug 2026 · Tags: Authentication bypass - [Apache Camel-Google-Storage: the consumer appended the remote object name to the configured downloadFileName directory without constraining the result](https://agentprime.io/advisories/GHSA-f78g-9385-qxqj.md) `GHSA-f78g-9385-qxqj`, `CVE-2026-66907` · Maven `org.apache.camel:camel-google-storage`: affected `>=4.0.0, <4.14.9 || >=4.15.0, <4.18.4 || >=4.19.0, <4.22.0`, fixed in `4.14.9`, `4.18.4`, `4.22.0` · CVSS 7.5 High · Not analysed yet · Published 24 Aug 2026 · Tags: Path traversal - [Apache Camel-Mail: the MimeMultipart data format copied MIME headers onto the Camel message without a header filter strategy when unmarshalling with headersInline enabled](https://agentprime.io/advisories/GHSA-cx47-qxp5-mmh2.md) `GHSA-cx47-qxp5-mmh2`, `CVE-2026-59230` · Maven `org.apache.camel:camel-mail`: affected `>=2.17.0, <4.14.9 || >=4.15.0, <4.18.4 || >=4.19.0, <4.22.0`, fixed in `4.14.9`, `4.18.4`, `4.22.0` · CVSS 6.5 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: CWE-20 - [Apache Camel-Azure-Storage-DataLake: the downloadToFile operation built the local download target from the remote path name without constraining it to the configured fileDir](https://agentprime.io/advisories/GHSA-7jwc-q3fj-c9pq.md) `GHSA-7jwc-q3fj-c9pq`, `CVE-2026-60093` · Maven `org.apache.camel:camel-azure-storage-datalake`: affected `>=4.0.0, <4.14.9 || >=4.15.0, <4.18.4 || >=4.19.0, <4.22.0`, fixed in `4.14.9`, `4.18.4`, `4.22.0` · CVSS 5.5 Medium · Not analysed yet · Published 24 Aug 2026 · Tags: Path traversal - [Apache Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDir](https://agentprime.io/advisories/GHSA-2x37-89hj-2j95.md) `GHSA-2x37-89hj-2j95`, `CVE-2026-66906` · Maven `org.apache.camel:camel-azure-storage-blob`: affected `>=4.0.0, <4.14.9 || >=4.15.0, <4.18.4 || >=4.19.0, <4.22.0`, fixed in `4.14.9`, `4.18.4`, `4.22.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Aug 2026 · Tags: Path traversal - [GeoTools has unauthenticated SQL injection in the jsonArrayContains filter function against PostGIS layers](https://agentprime.io/advisories/GHSA-mqjf-5f49-2fjh.md) `GHSA-mqjf-5f49-2fjh`, `CVE-2026-76904` · Maven `org.geotools.jdbc:gt-jdbc-postgis`: affected `>=35.0, <35.1 || >=34.0, <34.5 || >=30.5, <33.6`, fixed in `35.1`, `34.5`, `33.6` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2026 · Tags: SQL injection - [netty-incubator-codec-ohttp BinaryHttpParser: Unauthenticated CPU-exhaustion DoS via infinite loop in field-section decoding](https://agentprime.io/advisories/GHSA-4899-mpch-38p3.md) `GHSA-4899-mpch-38p3`, `CVE-2026-63202` · Maven `io.netty.incubator:netty-incubator-codec-bhttp`: affected `<0.0.23.Final`, fixed in `0.0.23.Final` · CVSS 7.5 High · Not analysed yet · Published 20 Aug 2026 · Tags: Denial of service - [netty-incubator-codec-ohttp: BinaryHttpParser should enforce limits for variable lengths fields](https://agentprime.io/advisories/GHSA-hmq9-67w8-j5pw.md) `GHSA-hmq9-67w8-j5pw`, `CVE-2026-61827` · Maven `io.netty.incubator:netty-incubator-codec-bhttp`: affected `<0.0.23.Final`, fixed in `0.0.23.Final` · CVSS 4.0, no score published · Not analysed yet · Published 20 Aug 2026 · Tags: Denial of service - [netty-incubator-codec-ohttp: Binary HTTP parser infinite loop on known-length field section boundary](https://agentprime.io/advisories/GHSA-8cfx-wx3q-mh5q.md) `GHSA-8cfx-wx3q-mh5q`, `CVE-2026-63124` · Maven `io.netty.incubator:netty-incubator-codec-bhttp`: affected `<0.0.23.Final`, fixed in `0.0.23.Final` · CVSS 7.5 High · Not analysed yet · Published 20 Aug 2026 · Tags: Denial of service - [netty-incubator-codec-ohttp: Binary HTTP parser unchecked varint length overflow causes decoder crash](https://agentprime.io/advisories/GHSA-pgrf-4654-3gq8.md) `GHSA-pgrf-4654-3gq8`, `CVE-2026-61799` · Maven `io.netty.incubator:netty-incubator-codec-bhttp`: affected `<0.0.23.Final`, fixed in `0.0.23.Final` · CVSS 5.3 Medium · Not analysed yet · Published 20 Aug 2026 · Tags: Memory corruption, CWE-248, CWE-681 - [netty-incubator-codec-ohttp: BoringSSL HPKE private key bytes exposed through toString() and exception messages](https://agentprime.io/advisories/GHSA-2mc4-j865-9q4r.md) `GHSA-2mc4-j865-9q4r`, `CVE-2026-61798` · Maven `io.netty.incubator:netty-incubator-codec-ohttp-hpke-classes-boringssl`: affected `<0.0.23.Final`, fixed in `0.0.23.Final` · CVSS 8.1 High · Not analysed yet · Published 20 Aug 2026 · Tags: Information disclosure - [netty-incubator-codec-ohttp: \[OHttpServerCodec\] Native Direct-Memory Leak on AEAD Decryption Failure Leads to Gateway Denial of Service](https://agentprime.io/advisories/GHSA-vmr9-j6wf-pmh2.md) `GHSA-vmr9-j6wf-pmh2`, `CVE-2026-54251` · Maven `io.netty.incubator:netty-incubator-codec-ohttp`: affected `<0.0.23.Final`, fixed in `0.0.23.Final` · CVSS 8.7 High · Not analysed yet · Published 20 Aug 2026 · Tags: CWE-664 - [jsoup XmlTreeBuilder vulnerable to memory exhaustion through deeply nested namespace declarations](https://agentprime.io/advisories/GHSA-65r4-943x-97jj.md) `GHSA-65r4-943x-97jj`, `CVE-2026-75140` · Maven `org.jsoup:jsoup`: affected `<1.23.2`, fixed in `1.23.2` · CVSS 8.7 High · Not analysed yet · Published 20 Aug 2026 · Tags: Denial of service - [GeoServer has a Server-Side Template Injection (SSTI) vulnerability in processing FreeMarker templates](https://agentprime.io/advisories/GHSA-wf6j-gr27-g7ch.md) `GHSA-wf6j-gr27-g7ch`, `CVE-2024-45747` · Maven `org.geoserver:gs-main` and 2 more: affected `<2.27.0`, fixed in `2.27.0` · CVSS 7.2 High · Not analysed yet · Published 19 Aug 2026 · Tags: CWE-749 - [XWiki Platform Live Data Live Table Connector has privilege escalation from edit to script right through Live Data editing](https://agentprime.io/advisories/GHSA-45ph-gxxr-gwgw.md) `GHSA-45ph-gxxr-gwgw`, `CVE-2026-53966` · Maven `org.xwiki.platform:xwiki-platform-livedata-livetable`: affected `>=13.4-rc-1, <16.10.17 || >=17.0.0-rc-1, <17.4.10 || >=17.5.0-rc-1, <17.10.4 || >=18.0.0-rc-1, <18.1.0-rc-1`, fixed in `16.10.17`, `17.4.10`, `17.10.4`, `18.1.0-rc-1` · CVSS 7.1 High · Not analysed yet · Published 19 Aug 2026 · Tags: Broken access control - [Keycloak: Unauthenticated account takeover via reset-credentials flow bypass](https://agentprime.io/advisories/GHSA-4gv3-mc9p-5wqc.md) `GHSA-4gv3-mc9p-5wqc`, `BIT-keycloak-2026-18963`, `CVE-2026-18963` · Maven `org.keycloak:keycloak-services`: affected `>=26.0.0, <26.4.15 || >=26.5.0, <26.6.6 || >=26.7.0, <26.7.2`, fixed in `26.4.15`, `26.6.6`, `26.7.2` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Aug 2026 · Tags: CWE-640 - [RabbitMQ Java client accepts broker frames larger than the negotiated AMQP frame_max](https://agentprime.io/advisories/GHSA-5xwg-cfvj-gff5.md) `GHSA-5xwg-cfvj-gff5`, `CVE-2026-61634` · Maven `com.rabbitmq:amqp-client`: affected `<5.33.0`, fixed in `5.33.0` · CVSS 0.0 None · Not analysed yet · Published 18 Aug 2026 · Tags: CWE-20 - [RabbitMQ Java client: TrustEverythingTrustManager used by default in useSslProtocol() enables MITM](https://agentprime.io/advisories/GHSA-5m9f-rphj-c435.md) `GHSA-5m9f-rphj-c435`, `CVE-2026-63336` · Maven `com.rabbitmq:amqp-client`: affected `<5.33.0`, fixed in `5.33.0` · CVSS 5.1 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Weak cryptography or TLS - [RabbitMQ Java client malformed body frame triggers raw command assembler exception](https://agentprime.io/advisories/GHSA-qx7j-jv8m-fppr.md) `GHSA-qx7j-jv8m-fppr`, `CVE-2026-63335` · Maven `com.rabbitmq:amqp-client`: affected `<5.31.0`, fixed in `5.31.0` · CVSS 6.3 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: CWE-20 - [RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loading](https://agentprime.io/advisories/GHSA-6g32-pxv4-2wfj.md) `GHSA-6g32-pxv4-2wfj`, `CVE-2026-63337` · Maven `com.rabbitmq:amqp-client`: affected `<5.33.0`, fixed in `5.33.0` · CVSS 7.5 High · Not analysed yet · Published 18 Aug 2026 · Tags: Code injection - [RabbitMQ Java client ValueReader: Oversized LongString/bytes length triggers OOM via unchecked allocation](https://agentprime.io/advisories/GHSA-68mj-5wr7-6fgg.md) `GHSA-68mj-5wr7-6fgg`, `CVE-2026-69219` · Maven `com.rabbitmq:amqp-client`: affected `<5.33.1`, fixed in `5.33.1` · CVSS 8.7 High · Not analysed yet · Published 18 Aug 2026 · Tags: Denial of service - [RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS](https://agentprime.io/advisories/GHSA-93j5-89vc-pph4.md) `GHSA-93j5-89vc-pph4`, `CVE-2026-69220` · Maven `com.rabbitmq:amqp-client`: affected `<5.33.1`, fixed in `5.33.1` · CVSS 8.7 High · Not analysed yet · Published 18 Aug 2026 · Tags: Denial of service - [Kestra vulnerable to stored XSS via custom Markdown \[\[link\]\] attribute injection](https://agentprime.io/advisories/GHSA-34pm-923j-7wf8.md) `GHSA-34pm-923j-7wf8`, `CVE-2026-55839` · Maven `io.kestra:kestra`: affected `<1.3.24`, fixed in `1.3.24` · CVSS 8.7 High · Not analysed yet · Published 18 Aug 2026 · Tags: Cross-site scripting (XSS) - [http4k: \`DigestAuthProvider.verify\` did not bind to request URI](https://agentprime.io/advisories/GHSA-p28p-j94q-pg32.md) `GHSA-p28p-j94q-pg32`, `CVE-2026-54148` · Maven `org.http4k:http4k-security-digest`: affected `>=6.0.0.0, <6.50.0.0 || >=5.0.0.0, <5.42.0.0 || >=4.0.0.0, <4.51.0.0`, fixed in `6.50.0.0`, `5.42.0.0`, `4.51.0.0` · CVSS 8.1 High · Not analysed yet · Published 17 Aug 2026 · Tags: Authentication bypass - [http4k: \`DigestAuthProvider.verify\` ignored configured algorithm and did not bind to request URI](https://agentprime.io/advisories/GHSA-vxxm-wwqh-mh47.md) `GHSA-vxxm-wwqh-mh47`, `CVE-2026-54147` · Maven `org.http4k:http4k-security-digest`: affected `>=6.0.0.0, <6.50.0.0 || >=5.0.0.0, <5.42.0.0 || <=4.48.2.0`, fixed in `6.50.0.0`, `5.42.0.0` · CVSS 6.5 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Weak cryptography or TLS - [docx4j: Stack Overflow via Cyclic \`w:basedOn\` Style Chain leads to Denial of Service](https://agentprime.io/advisories/GHSA-gc95-3vw8-vg43.md) `GHSA-gc95-3vw8-vg43`, `CVE-2026-53752` · Maven `org.docx4j:docx4j-core`: affected `<11.5.14`, fixed in `11.5.14` · CVSS 7.5 High · Not analysed yet · Published 17 Aug 2026 · Tags: Denial of service - [http4k: Unbounded gzip decompression in \`ServerFilters.GZip\` / \`RequestFilters.GunZip\` allowed memory-exhaustion DoS](https://agentprime.io/advisories/GHSA-g4w2-6h2r-3m3w.md) `GHSA-g4w2-6h2r-3m3w`, `CVE-2026-53659` · Maven `org.http4k:http4k-core`: affected `>=6.0.0.0, <6.49.0.0 || >=5.0.0.0, <5.42.0.0 || <=4.48.2.0`, fixed in `6.49.0.0`, `5.42.0.0` · CVSS 7.5 High · Not analysed yet · Published 17 Aug 2026 · Tags: CWE-409 - [Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite](https://agentprime.io/advisories/GHSA-8c42-7qj2-3j46.md) `GHSA-8c42-7qj2-3j46`, `CVE-2026-59903` · Maven `io.netty:netty-codec-http`: affected `>=4.2.0.Final, <4.2.17.Final || <4.1.137.Final`, fixed in `4.2.17.Final`, `4.1.137.Final` · CVSS 6.5 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: CWE-524 - [Netty: Memory Exhaustion in SctpMessageCompletionHandler](https://agentprime.io/advisories/GHSA-2qj4-mmr9-4v2f.md) `GHSA-2qj4-mmr9-4v2f`, `CVE-2026-59902` · Maven `io.netty:netty-transport-sctp`: affected `>=4.2.0.Final, <4.2.17.Final || <4.1.137.Final`, fixed in `4.2.17.Final`, `4.1.137.Final` · CVSS 7.5 High · Not analysed yet · Published 17 Aug 2026 · Tags: Denial of service - [mchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadgets"](https://agentprime.io/advisories/GHSA-h84g-69h7-mw6v.md) `GHSA-h84g-69h7-mw6v`, `CVE-2026-55153` · Maven `com.mchange:mchange-commons-java`: affected `<0.6.0`, fixed in `0.6.0` · CVSS 7.1 High · Not analysed yet · Published 14 Aug 2026 · Tags: Code injection, Insecure deserialization - [OpenAM Insecure SSO Cookie Initialization](https://agentprime.io/advisories/GHSA-fpmh-vx4h-xc33.md) `GHSA-fpmh-vx4h-xc33`, `CVE-2026-53660` · Maven `org.openidentityplatform.openam:openam-core`: affected `<16.1.1`, fixed in `16.1.1` · CVSS 7.4 High · Not analysed yet · Published 14 Aug 2026 · Tags: CWE-1004, CWE-1188, CWE-1275 - [Apache Ranger has a Command Injection vulnerability](https://agentprime.io/advisories/GHSA-6qc3-v8fv-fv9j.md) `GHSA-6qc3-v8fv-fv9j`, `CVE-2026-28672` · Maven `org.apache.ranger:ranger`: affected `>=0.6.0, <=2.8.0`, no fixed version yet · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Aug 2026 · Tags: Command injection - [Bouncy Castle: the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound](https://agentprime.io/advisories/GHSA-v6w3-qrh8-qccc.md) `GHSA-v6w3-qrh8-qccc`, `CVE-2026-8798` · Maven `org.bouncycastle:bc-fips`: affected `>=2.1.0, <2.1.3`, fixed in `2.1.3` · CVSS 8.7 High · Not analysed yet · Published 8 Aug 2026 · Tags: Denial of service - [Bouncy Castle: Zeroisation of sensitive key material on garbage collection relies on finalization.](https://agentprime.io/advisories/GHSA-98j2-6v39-78w8.md) `GHSA-98j2-6v39-78w8`, `CVE-2026-13505` · Maven `org.bouncycastle:bc-fips`: affected `<1.0.2.7 || >=2.0.0, <2.0.2 || >=2.1.0, <2.1.3`, fixed in `1.0.2.7`, `2.0.2`, `2.1.3` · CVSS 8.7 High · Not analysed yet · Published 8 Aug 2026 · Tags: Denial of service - [Netty: RedisArrayAggregator max-elements failure leaves retained partial aggregate state](https://agentprime.io/advisories/GHSA-p9jm-q85p-7mcp.md) `GHSA-p9jm-q85p-7mcp`, `CVE-2026-56818` · Maven `io.netty:netty-codec-redis`: affected `<4.1.136.Final || >=4.2.0-Final, <4.2.16.Final`, fixed in `4.1.136.Final`, `4.2.16.Final` · CVSS 6.5 Medium · Not analysed yet · Published 7 Aug 2026 · Tags: Denial of service, CWE-703 - [jsoup: Cleaner may expose markup with custom raw-text elements](https://agentprime.io/advisories/GHSA-pmhh-3w7g-xqp8.md) `GHSA-pmhh-3w7g-xqp8`, `CVE-2026-71497` · Maven `org.jsoup:jsoup`: affected `>=1.14.3, <1.23.1`, fixed in `1.23.1` · CVSS 4.7 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: Cross-site scripting (XSS) - [Apache Qpid Proton-J: Unbounded type nesting can lead to pre-authentication stackoverflow](https://agentprime.io/advisories/GHSA-p2gc-fm5w-94jj.md) `GHSA-p2gc-fm5w-94jj`, `CVE-2026-66274` · Maven `org.apache.qpid:proton-j`: affected `<0.35.0`, fixed in `0.35.0` · CVSS 7.5 High · Not analysed yet · Published 5 Aug 2026 · Tags: Denial of service - [Duplicate Advisory: jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for GHSA-72hv-8253-57qq)](https://agentprime.io/advisories/GHSA-642r-3gj9-2pj5.md) `GHSA-642r-3gj9-2pj5` · Maven `tools.jackson.core:jackson-core`: affected `>=3.0.0`, no fixed version yet · CVSS 4.0, no score published · Withdrawn · Not analysed yet · Published 4 Aug 2026 · Tags: Denial of service - [Duplicate Advisory: jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition](https://agentprime.io/advisories/GHSA-6qm2-mcq7-53qp.md) `GHSA-6qm2-mcq7-53qp` · Maven `tools.jackson.core:jackson-core`: affected `>=3.0.0, <3.1.0 || >=2.19.0, <2.21.1 || >=2.15.0, <2.18.6`, fixed in `3.1.0`, `2.21.1`, `2.18.6` · CVSS 4.0, no score published · Withdrawn · Not analysed yet · Published 4 Aug 2026 · Tags: Denial of service - [Bouncy Castle: Lazy ASN.1 sequence forcing resets nesting-depth guard](https://agentprime.io/advisories/GHSA-qp49-qgx5-5m26.md) `GHSA-qp49-qgx5-5m26`, `CVE-2026-13506` · Maven `org.bouncycastle:bc-fips` and 3 more: affected `<1.0.2.7 || >=2.0.0, <2.0.2 || >=2.1.0, <2.1.3`, fixed in `1.0.2.7`, `2.0.2`, `2.1.3` · CVSS 8.7 High · Not analysed yet · Published 3 Aug 2026 · Tags: Denial of service Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .