# Maven Advisories.

Every Maven Advisory we hold (Java · Kotlin), newest first.

## Records, newest first (an older page)

- [JLine: ReDoS in Built-in grep Command Amplified by Automatic \`.\*\` Wrapping](https://agentprime.io/advisories/GHSA-r2xf-8xr9-62gw.md)
  `GHSA-r2xf-8xr9-62gw`, `CVE-2026-77422` · Maven `org.jline:jline-builtins`: affected `>=4.0.0, <4.3.1 || >=3.0.0, <3.30.15`, fixed in `4.3.1`, `3.30.15` · CVSS 7.5 High · Not analysed yet · Published 23 Sept 2026 · Tags: Denial of service
- [JLine: ReDoS via \`HISTORY_IGNORE\` Configuration Variable](https://agentprime.io/advisories/GHSA-5q95-hrpc-m3w3.md)
  `GHSA-5q95-hrpc-m3w3`, `CVE-2026-77420` · Maven `org.jline:jline-reader`: affected `>=4.0.0, <4.3.1 || >=3.0.0, <3.30.15`, fixed in `4.3.1`, `3.30.15` · CVSS 5.5 Medium · Not analysed yet · Published 23 Sept 2026 · Tags: Denial of service
- [Moquette: Pattern-ACL wildcard injection (cross-tenant authorization bypass) plus a remote-unauthenticated DoS cluster, a Will-message authorization bypass, and a cross-session durable-corruption bug](https://agentprime.io/advisories/GHSA-5f42-97gr-vfhq.md)
  `GHSA-5f42-97gr-vfhq`, `CVE-2026-85724`, `CVE-2026-95842`, `CVE-2026-95843`, `CVE-2026-95844`, `CVE-2026-95845`, `CVE-2026-95846`, `CVE-2026-95847`, `CVE-2026-95848` · Maven `io.moquette:moquette-broker`: affected `<0.18.1`, fixed in `0.18.1` · CVSS 8.7 High · Not analysed yet · Published 23 Sept 2026 · Tags: Denial of service, Broken access control, CWE-20, CWE-99
- [Graylog: Manager-to-Owner privilege escalation on saved searches and dashboards](https://agentprime.io/advisories/GHSA-m9c2-85gv-8xr5.md)
  `GHSA-m9c2-85gv-8xr5`, `CVE-2026-69190` · Maven `org.graylog2:graylog2-server`: affected `>=6.3.0, <6.3.14 || >=7.0.0, <7.0.9 || >=7.1.0, <7.1.4`, fixed in `6.3.14`, `7.0.9`, `7.1.4` · CVSS 6.3 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Broken access control
- [MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers](https://agentprime.io/advisories/GHSA-7952-gx68-cjqr.md)
  `GHSA-7952-gx68-cjqr`, `CVE-2026-65829`, `PYSEC-2026-4108` · Maven `net.sf.mpxj:mpxj` and 6 more: affected `>=7.3.0, <16.5.0`, fixed in `16.5.0` · CVSS 5.3 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Path traversal
- [MPXJ: XXE Vulnerability in MerlinReader](https://agentprime.io/advisories/GHSA-5vvx-3h34-f3gj.md)
  `GHSA-5vvx-3h34-f3gj`, `CVE-2026-61570`, `PYSEC-2026-4107` · Maven `net.sf.mpxj:mpxj` and 6 more: affected `>=5.5.5, <16.4.1`, fixed in `16.4.1` · CVSS 7.5 High · Not analysed yet · Published 22 Sept 2026 · Tags: XML external entities (XXE)
- [io.moquette:moquette-broker has a Missing Authorization issue](https://agentprime.io/advisories/GHSA-9jjc-fw8x-fmwx.md)
  `GHSA-9jjc-fw8x-fmwx`, `CVE-2026-85058` · Maven `io.moquette:moquette-broker`: affected `<0.18.1`, fixed in `0.18.1` · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: Broken access control
- [org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue](https://agentprime.io/advisories/GHSA-26vp-8gxg-v4pg.md)
  `GHSA-26vp-8gxg-v4pg`, `CVE-2025-53837` · Maven `org.xwiki.rendering:xwiki-rendering-xml`: affected `<14.10.2`, fixed in `14.10.2` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Code injection
- [Opencast: Stored XSS in Paella player via WebVTT/DFXP caption cue text](https://agentprime.io/advisories/GHSA-m6c8-jcw2-5r25.md)
  `GHSA-m6c8-jcw2-5r25`, `CVE-2026-77615` · Maven `org.opencastproject:opencast-engage-paella-player-7` and 1 more: affected `<19.7 || >=20.0, <20.2`, fixed in `19.7`, `20.2` · CVSS 8.7 High · Not analysed yet · Published 18 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Duplicate Advisory: snappy-java: Heap buffer overflow in Snappy.uncompress\*Array typed-array methods](https://agentprime.io/advisories/GHSA-wm36-87w8-wg22.md)
  `GHSA-wm36-87w8-wg22` · Maven `org.xerial.snappy:snappy-java`: affected `<=1.1.10.8`, no fixed version yet · CVSS 6.5 Medium · Withdrawn · Not analysed yet · Published 18 Sept 2026 · Tags: Memory corruption
- [HAPI FHIR: SHCParser DEFLATE infinite loop causes denial of service](https://agentprime.io/advisories/GHSA-gq9c-wmrm-5hvr.md)
  `GHSA-gq9c-wmrm-5hvr`, `CVE-2026-81876` · Maven `ca.uhn.hapi.fhir:org.hl7.fhir.r5` and 2 more: affected `<6.9.12`, fixed in `6.9.12` · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2026 · Tags: Denial of service, CWE-20
- [HAPI FHIR: SHCParser unbounded DEFLATE decompression causes denial of service](https://agentprime.io/advisories/GHSA-3w98-rrpr-fprr.md)
  `GHSA-3w98-rrpr-fprr`, `CVE-2026-81875` · Maven `ca.uhn.hapi.fhir:org.hl7.fhir.r5` and 2 more: affected `<6.9.12`, fixed in `6.9.12` · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2026 · Tags: Denial of service, CWE-20, CWE-409
- [AsyncHttpClient re-sends client-wide realm credentials to a cross-origin redirect target](https://agentprime.io/advisories/GHSA-f8m2-889x-vw4x.md)
  `GHSA-f8m2-889x-vw4x`, `CVE-2026-85717` · Maven `org.asynchttpclient:async-http-client`: affected `>=3.0.9, <3.0.12 || >=2.14.5, <2.16.1`, fixed in `3.0.12`, `2.16.1` · CVSS 6.8 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Information disclosure, Hard-coded credentials
- [AsyncHttpClient sends origin credentials to the proxy on the plaintext CONNECT request](https://agentprime.io/advisories/GHSA-xr57-gcx8-52hf.md)
  `GHSA-xr57-gcx8-52hf`, `CVE-2026-85720` · Maven `org.asynchttpclient:async-http-client`: affected `>=3.0.0, <3.0.12 || >=2.0.0, <2.16.1`, fixed in `3.0.12`, `2.16.1` · CVSS 5.9 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Weak cryptography or TLS, Hard-coded credentials
- [AsyncHttpClient's unbounded HTTP/1.1 response decompression enables a decompression-bomb denial of service](https://agentprime.io/advisories/GHSA-7grg-jcf7-rpmx.md)
  `GHSA-7grg-jcf7-rpmx`, `CVE-2026-85721` · Maven `org.asynchttpclient:async-http-client`: affected `>=3.0.0, <3.0.12 || >=2.0.0, <2.16.1`, fixed in `3.0.12`, `2.16.1` · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2026 · Tags: Denial of service, CWE-409
- [AsyncHttpClient doesn't verify SCRAM and Digest mutual-authentication responses](https://agentprime.io/advisories/GHSA-fj9w-c36g-h5x8.md)
  `GHSA-fj9w-c36g-h5x8`, `CVE-2026-85716` · Maven `org.asynchttpclient:async-http-client`: affected `>=3.0.8, <3.0.12`, fixed in `3.0.12` · CVSS 3.7 Low · Not analysed yet · Published 17 Sept 2026 · Tags: Authentication bypass, CWE-390
- [Kestra: Unauthenticated management/actuator endpoints exposed on port 8081 (/env, /loggers) bypass API basic-auth](https://agentprime.io/advisories/GHSA-hpj9-grjp-7vc7.md)
  `GHSA-hpj9-grjp-7vc7`, `CVE-2026-73245` · Maven `io.kestra:kestra`: affected `<2.0.0`, fixed in `2.0.0` · CVSS 6.5 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Authentication bypass
- [Kestra: SSRF via Pebble http() function allows unauthenticated access to internal services & cloud metadata](https://agentprime.io/advisories/GHSA-r56g-q4p6-m3p6.md)
  `GHSA-r56g-q4p6-m3p6`, `CVE-2026-73247` · Maven `io.kestra:core` and 1 more: affected `<=1.3.31`, no fixed version yet · CVSS 8.6 High · Not analysed yet · Published 17 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Junrar: LocalFolderExtractor mkdir escape allows directory creation outside extraction root](https://agentprime.io/advisories/GHSA-89m4-43j5-vhhx.md)
  `GHSA-89m4-43j5-vhhx`, `CVE-2026-86071` · Maven `com.github.junrar:junrar`: affected `<7.6.1`, fixed in `7.6.1` · CVSS 3.7 Low · Not analysed yet · Published 17 Sept 2026 · Tags: Path traversal
- [MariaDB Connector/J does not enforce allowLocalInfile=false on server-initiated LOCAL INFILE requests](https://agentprime.io/advisories/GHSA-wxmm-q36w-r9xj.md)
  `GHSA-wxmm-q36w-r9xj`, `CVE-2026-61700` · Maven `org.mariadb.jdbc:mariadb-java-client`: affected `<2.7.14 || >=3.0.0, <3.3.5 || >=3.4.0, <3.4.3 || >=3.5.0, <3.5.9`, fixed in `2.7.14`, `3.3.5`, `3.4.3`, `3.5.9` · CVSS 3.7 Low · Not analysed yet · Published 17 Sept 2026 · Tags: Broken access control
- [Wire: Unauthenticated decoder crash via 32-bit length integer overflow in ByteArrayProtoReader32 (incomplete fix of CVE-2026-45799)](https://agentprime.io/advisories/GHSA-9rm7-3qhh-h2mc.md)
  `GHSA-9rm7-3qhh-h2mc`, `CVE-2026-63126` · Maven `com.squareup.wire:wire-runtime`: affected `<6.4.5 || >=7.0.0-alpha01, <7.0.0-alpha04`, fixed in `6.4.5`, `7.0.0-alpha04` · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2026 · Tags: Memory corruption
- [RabbitMQ Java client has frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcement](https://agentprime.io/advisories/GHSA-jh4v-gfqj-7rhx.md)
  `GHSA-jh4v-gfqj-7rhx`, `CVE-2026-75516` · Maven `com.rabbitmq:amqp-client`: affected `<5.34.0`, fixed in `5.34.0` · CVSS 8.7 High · Not analysed yet · Published 17 Sept 2026 · Tags: Denial of service
- [Http4s: Ember HTTP/2 buffers a frame's declared payload before checking SETTINGS_MAX_FRAME_SIZE](https://agentprime.io/advisories/GHSA-gq9p-f254-h286.md)
  `GHSA-gq9p-f254-h286`, `CVE-2026-88975` · Maven `org.http4s:http4s-ember-core_2.12` and 2 more: affected `<0.23.37`, fixed in `0.23.37` · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service
- [Http4s: ResourceService and Webjar Service path escape via percent-encoded separators](https://agentprime.io/advisories/GHSA-crq5-92j2-j7wv.md)
  `GHSA-crq5-92j2-j7wv`, `CVE-2026-69201` · Maven `org.http4s:http4s-server_2.12` and 2 more: affected `<0.23.35`, fixed in `0.23.35` · CVSS 5.9 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Path traversal
- [Http4s Ember HTTP/2: unbounded continuation frame accumulation](https://agentprime.io/advisories/GHSA-cp4q-fqw9-4hf6.md)
  `GHSA-cp4q-fqw9-4hf6`, `CVE-2026-69218` · Maven `org.http4s:http4s-ember-core_2.12` and 2 more: affected `<0.23.35`, fixed in `0.23.35` · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service
- [Http4s: Ember chunk parser lenience (TE.TE request smuggling)](https://agentprime.io/advisories/GHSA-jrpm-956j-96jg.md)
  `GHSA-jrpm-956j-96jg`, `CVE-2026-69216` · Maven `org.http4s:http4s-ember-core_2.12` and 2 more: affected `<0.23.35`, fixed in `0.23.35` · CVSS 5.4 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: HTTP request smuggling
- [Http4s: CookieJar middleware matches by substring, leaking cookies cross-origin](https://agentprime.io/advisories/GHSA-grh8-3p95-f9rr.md)
  `GHSA-grh8-3p95-f9rr`, `CVE-2026-69215` · Maven `org.http4s:http4s-client_2.12` and 2 more: affected `<0.23.35`, fixed in `0.23.35` · CVSS 6.8 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-565, CWE-1275
- [Http4s: CookieJar middleware accepts arbitrary Set-Cookie domain](https://agentprime.io/advisories/GHSA-wv64-j4fq-5f9x.md)
  `GHSA-wv64-j4fq-5f9x`, `CVE-2026-69214` · Maven `org.http4s:http4s-client_2.12` and 2 more: affected `<0.23.35`, fixed in `0.23.35` · CVSS 6.8 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass, CWE-565
- [Http4s Ember HTTP/2 has an unbounded outbound frame queue](https://agentprime.io/advisories/GHSA-8f3q-3jmv-7prw.md)
  `GHSA-8f3q-3jmv-7prw`, `CVE-2026-69213` · Maven `org.http4s:http4s-ember-core_2.12` and 2 more: affected `<0.23.35`, fixed in `0.23.35` · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service
- [Http4s: DigestAuth nonce map grows unbounded](https://agentprime.io/advisories/GHSA-fm4g-76c9-7w69.md)
  `GHSA-fm4g-76c9-7w69`, `CVE-2026-69208` · Maven `org.http4s:http4s-ember-server_2.12` and 2 more: affected `<0.23.35`, fixed in `0.23.35` · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service
- [Http4s: DigestAuth allows replay of captured requests](https://agentprime.io/advisories/GHSA-9xww-74xv-gjfp.md)
  `GHSA-9xww-74xv-gjfp`, `CVE-2026-69206` · Maven `org.http4s:http4s-ember-core_2.12` and 2 more: affected `<0.23.35`, fixed in `0.23.35` · CVSS 5.9 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: Authentication bypass
- [Http4s Ember Transfer-Encoding value parsing (TE.CL / TE.0 request smuggling)](https://agentprime.io/advisories/GHSA-9998-894r-fwvr.md)
  `GHSA-9998-894r-fwvr`, `CVE-2026-69205` · Maven `org.http4s:http4s-ember-core_2.12` and 2 more: affected `<0.23.35`, fixed in `0.23.35` · CVSS 8.7 High · Not analysed yet · Published 15 Sept 2026 · Tags: HTTP request smuggling
- [Http4s Ember accepts Transfer-Encoding combined with Content-Length (CL.TE request smuggling)](https://agentprime.io/advisories/GHSA-8h4c-x2wg-6xp8.md)
  `GHSA-8h4c-x2wg-6xp8`, `CVE-2026-69204` · Maven `org.http4s:http4s-ember-core_2.12` and 2 more: affected `<0.23.35`, fixed in `0.23.35` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: HTTP request smuggling
- [Http4s Ember HTTP/2 does not enforce SETTINGS_MAX_CONCURRENT_STREAMS](https://agentprime.io/advisories/GHSA-9vwc-pc8p-253q.md)
  `GHSA-9vwc-pc8p-253q`, `CVE-2026-69203` · Maven `org.http4s:http4s-ember-core_2.12` and 2 more: affected `<0.23.35`, fixed in `0.23.35` · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service
- [Http4s Ember HTTP/2: unbounded inbound body buffering](https://agentprime.io/advisories/GHSA-6m4x-pp6q-5jmm.md)
  `GHSA-6m4x-pp6q-5jmm`, `CVE-2026-69202` · Maven `org.http4s:http4s-ember-core_2.12` and 2 more: affected `<0.23.35`, fixed in `0.23.35` · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2026 · Tags: Denial of service
- [Central Dogma: SSH host-key verification permanently disabled in Git mirror (SshGitMirror)](https://agentprime.io/advisories/GHSA-vjfw-cpmh-xwv3.md)
  `GHSA-vjfw-cpmh-xwv3`, `CVE-2026-11745` · Maven `com.linecorp.centraldogma:centraldogma-server-mirror-git`: affected `<0.84.0`, fixed in `0.84.0` · CVSS 8.8 High · Not analysed yet · Published 11 Sept 2026 · Tags: CWE-322
- [Central Dogma: Hard-coded ZooKeeper replication secret 'ch4n63m3' with silent fallback enables cluster takeover](https://agentprime.io/advisories/GHSA-2j95-gqxf-v3vg.md)
  `GHSA-2j95-gqxf-v3vg`, `CVE-2026-11746` · Maven `com.linecorp.centraldogma:centraldogma-server`: affected `<0.84.0`, fixed in `0.84.0` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 Sept 2026 · Tags: Hard-coded credentials
- [Central Dogma: LDAP injection in SearchFirstActiveDirectoryRealm enables authentication confusion and audit log evasion](https://agentprime.io/advisories/GHSA-98q5-5qh2-7w75.md)
  `GHSA-98q5-5qh2-7w75`, `CVE-2026-11748` · Maven `com.linecorp.centraldogma:centraldogma-server-auth-shiro`: affected `<0.84.0`, fixed in `0.84.0` · CVSS 6.9 Medium · Not analysed yet · Published 11 Sept 2026 · Tags: Other injection
- [Apache FreeMarker template loading mechanism vulnerable to path traversal](https://agentprime.io/advisories/GHSA-27j2-h3m2-8237.md)
  `GHSA-27j2-h3m2-8237`, `CVE-2026-84939` · Maven `org.freemarker:freemarker`: affected `>=2.2.0, <2.3.35`, fixed in `2.3.35` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2026 · Tags: Path traversal
- [GeoNetwork Web Module: Unauthenticaded Server-Side Request Forgery in SLD Tool](https://agentprime.io/advisories/GHSA-5hx7-j24v-rffj.md)
  `GHSA-5hx7-j24v-rffj`, `CVE-2026-55864` · Maven `org.geonetwork-opensource:gn-web-app`: affected `>=4.4.0, <4.4.12 || >=4.0.0, <4.2.17`, fixed in `4.4.12`, `4.2.17` · CVSS 7.8 High · Not analysed yet · Published 9 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext](https://agentprime.io/advisories/GHSA-c4c3-7fpv-j4q5.md)
  `GHSA-c4c3-7fpv-j4q5`, `CVE-2026-75595` · Maven `io.netty:netty-handler`: affected `>=4.2.0.Final, <4.2.17.Final || <4.1.137.Final`, fixed in `4.2.17.Final`, `4.1.137.Final` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-475, CWE-754
- [Netty: Fragmented ClientHello records trigger quadratic pre-handshake reassembly in default SNI parsing](https://agentprime.io/advisories/GHSA-fccg-mwvh-qqg4.md)
  `GHSA-fccg-mwvh-qqg4`, `CVE-2026-75596` · Maven `io.netty:netty-handler`: affected `>=4.2.0.Final, <4.2.17.Final || <4.1.137.Final`, fixed in `4.2.17.Final`, `4.1.137.Final` · CVSS 8.7 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service
- [Handlebars.java: Arbitrary file read in \`SpringTemplateLoader\` via URL-fragment suffix bypass](https://agentprime.io/advisories/GHSA-g29j-rwfv-h99w.md)
  `GHSA-g29j-rwfv-h99w`, `CVE-2026-63490` · Maven `com.github.jknack:handlebars-springmvc`: affected `<4.5.3`, fixed in `4.5.3` · CVSS 7.5 High · Not analysed yet · Published 2 Sept 2026 · Tags: Path traversal, Information disclosure
- [jolokia-service-jsr160 Incomplete target JMX Service URL deny list handling for user-controlled input](https://agentprime.io/advisories/GHSA-c9ff-59g8-m36q.md)
  `GHSA-c9ff-59g8-m36q`, `CVE-2026-84218` · Maven `org.jolokia:jolokia-service-jsr160`: affected `<2.6.2`, fixed in `2.6.2` · CVSS 8.1 High · Not analysed yet · Published 1 Sept 2026 · Tags: CWE-184
- [org.mariadb:r2dbc-mariadb vulnerable to cleartext password disclosure to a man-in-the-middle server (clear-text auth plugins not gated on a secure transport)](https://agentprime.io/advisories/GHSA-c857-9x2m-cvh2.md)
  `GHSA-c857-9x2m-cvh2`, `CVE-2026-55860` · Maven `org.mariadb:r2dbc-mariadb`: affected `<1.4.1`, fixed in `1.4.1` · CVSS 5.9 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Weak cryptography or TLS, Hard-coded credentials
- [org.mariadb:r2dbc-mariadb has Inappropriate Encoding for Output Context and Improper Encoding or Escaping of Output](https://agentprime.io/advisories/GHSA-5rqc-86vf-g8r2.md)
  `GHSA-5rqc-86vf-g8r2`, `CVE-2026-55859` · Maven `org.mariadb:r2dbc-mariadb`: affected `<1.4.1`, fixed in `1.4.1` · CVSS 5.9 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: CWE-116, CWE-838
- [org.mariadb.jdbc:mariadb-java-client has Inappropriate Encoding for Output Context](https://agentprime.io/advisories/GHSA-xvr9-35cr-46v9.md)
  `GHSA-xvr9-35cr-46v9`, `CVE-2026-55858` · Maven `org.mariadb.jdbc:mariadb-java-client`: affected `<2.7.14 || >=3.0.0, <3.3.5 || >=3.4.0, <3.4.3 || >=3.5.0, <3.5.9`, fixed in `2.7.14`, `3.3.5`, `3.4.3`, `3.5.9` · CVSS 5.9 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: CWE-838
- [org.mariadb.jdbc:mariadb-java-client has Cleartext Transmission of Sensitive Information and Insufficiently Protected Credentials](https://agentprime.io/advisories/GHSA-qxvw-fvwx-5cp7.md)
  `GHSA-qxvw-fvwx-5cp7`, `CVE-2026-55857` · Maven `org.mariadb.jdbc:mariadb-java-client`: affected `<2.7.14 || >=3.0.0, <3.3.5 || >=3.4.0, <3.4.3 || >=3.5.0, <3.5.9`, fixed in `2.7.14`, `3.3.5`, `3.4.3`, `3.5.9` · CVSS 5.9 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Weak cryptography or TLS, Hard-coded credentials
- [MariaDB has cleartext password disclosure to a MITM on the initial-handshake](https://agentprime.io/advisories/GHSA-g9jj-cgmh-9f38.md)
  `GHSA-g9jj-cgmh-9f38`, `CVE-2026-55856` · Maven `org.mariadb.jdbc:mariadb-java-client`: affected `<2.7.14 || >=3.0.0, <3.3.5 || >=3.4.0, <3.4.3 || >=3.5.0, <3.5.9`, fixed in `2.7.14`, `3.3.5`, `3.4.3`, `3.5.9` · CVSS 5.9 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Hard-coded credentials
- [MapFish Print has XXE that allows reading arbitrary files of certain types](https://agentprime.io/advisories/GHSA-5v29-34h8-v68r.md)
  `GHSA-5v29-34h8-v68r`, `CVE-2026-55848` · Maven `org.mapfish.print:print-lib` and 2 more: affected `>=3.0.0, <3.28.30 || >=3.29.0, <3.30.32 || >=3.32.0, <3.33.16 || >=3.34.0, <4.0.5`, fixed in `3.28.30`, `3.30.32`, `3.33.16`, `4.0.5` · CVSS 8.6 High · Not analysed yet · Published 28 Aug 2026 · Tags: XML external entities (XXE)
- [Graylog token revocation endpoint allows authenticated users to delete other users’ access tokens](https://agentprime.io/advisories/GHSA-j769-9gv9-65gr.md)
  `GHSA-j769-9gv9-65gr`, `CVE-2026-55867` · Maven `org.graylog2:graylog2-server`: affected `>=6.2.0, <6.3.12 || >=7.0.0, <7.0.7 || >=7.1.0, <7.1.2`, fixed in `6.3.12`, `7.0.7`, `7.1.2` · CVSS 5.3 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Broken access control
- [Fortigate syslog message parser can be exploited to modify or delete fields from the original message](https://agentprime.io/advisories/GHSA-gqr6-r77p-c2pj.md)
  `GHSA-gqr6-r77p-c2pj`, `CVE-2026-55841` · Maven `org.graylog2:graylog2-server`: affected `<6.3.12 || >=7.0.0, <7.0.7 || >=7.1.0, <7.1.2`, fixed in `6.3.12`, `7.0.7`, `7.1.2` · CVSS 7.5 High · Not analysed yet · Published 28 Aug 2026 · Tags: CWE-138
- [PowSyBl Core has Command Injection in LocalCommandExecutor-s](https://agentprime.io/advisories/GHSA-jqvf-j3ww-r8c7.md)
  `GHSA-jqvf-j3ww-r8c7`, `CVE-2026-55673` · Maven `com.powsybl:powsybl-computation-local`: affected `<7.2.2`, fixed in `7.2.2` · CVSS 7.1 High · Not analysed yet · Published 28 Aug 2026 · Tags: Command injection
- [Spinnaker: Improper yaml processing on kustomize bake operations](https://agentprime.io/advisories/GHSA-p68j-q7hf-3qcp.md)
  `GHSA-p68j-q7hf-3qcp`, `CVE-2026-55175` · Maven `io.spinnaker.rosco:rosco-manifests`: affected `<2025.3.4 || >=2025.4.0, <2025.4.4 || >=2026.0.0, <2026.0.3 || >=2026.1.0, <2026.1.1`, fixed in `2025.3.4`, `2025.4.4`, `2026.0.3`, `2026.1.1` · CVSS 7.5 High · Not analysed yet · Published 28 Aug 2026 · Tags: Insecure deserialization
- [Graylog Server: System Catalog titles endpoint can be used to retrieve values of protected database fields](https://agentprime.io/advisories/GHSA-q79r-r9xg-r863.md)
  `GHSA-q79r-r9xg-r863`, `CVE-2026-55425` · Maven `org.graylog2:graylog2-server`: affected `>=7.1.0, <7.1.4`, fixed in `7.1.4` · CVSS 5.0 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: CWE-213
- [Yamcs has DOM XSS in Extension Routing](https://agentprime.io/advisories/GHSA-9272-wg2r-7xmx.md)
  `GHSA-9272-wg2r-7xmx`, `CVE-2026-55566` · Maven `org.yamcs:yamcs-core`: affected `>=5.13.0, <5.13.2 || <5.12.8`, fixed in `5.13.2`, `5.12.8` · CVSS 4.3 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Cross-site scripting (XSS)
- [Yamcs vulnerable to authenticated remote code execution via unescaped StreamSQL \`LIKE\` pattern compiled by Janino (\`LikeExpression\`)](https://agentprime.io/advisories/GHSA-c64q-hj4j-375f.md)
  `GHSA-c64q-hj4j-375f`, `CVE-2026-55565` · Maven `org.yamcs:yamcs-core`: affected `>=5.13.0, <5.13.2 || <5.12.8`, fixed in `5.13.2`, `5.12.8` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Code injection
- [Yamcs vulnerable to Remote Code Execution via instance-template argument YAML injection (createInstance)](https://agentprime.io/advisories/GHSA-73mf-m39p-wpm9.md)
  `GHSA-73mf-m39p-wpm9`, `CVE-2026-55559` · Maven `org.yamcs:yamcs-core`: affected `>=5.13.0, <5.13.2 || <5.12.8`, fixed in `5.13.2`, `5.12.8` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Aug 2026 · Tags: Code injection
- [Yamcs has Unauthenticated Directory Traversal](https://agentprime.io/advisories/GHSA-9jg3-g3wh-w9pj.md)
  `GHSA-9jg3-g3wh-w9pj`, `CVE-2026-55552` · Maven `org.yamcs:yamcs-core`: affected `<5.12.0`, fixed in `5.12.0` · CVSS 7.5 High · Not analysed yet · Published 28 Aug 2026 · Tags: Path traversal
- [Yamcs has Reflected XSS in the URL of the Authorize Endpoint](https://agentprime.io/advisories/GHSA-rxpg-wjf8-qv9c.md)
  `GHSA-rxpg-wjf8-qv9c`, `CVE-2026-55549` · Maven `org.yamcs:yamcs-core`: affected `<5.9.4`, fixed in `5.9.4` · CVSS 6.5 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Cross-site scripting (XSS)

Newest: <https://agentprime.io/advisories/ecosystem/maven.md>
Older: <https://agentprime.io/advisories/ecosystem/maven.md?cursor=WyIyMDI2LTA4LTI4VDE3OjE3OjUwLjAwMDAwMFoiLCJHSFNBLXJ4cGctd2pmOC1xdjljIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?ecosystem=Maven&cursor=WyIyMDI2LTA5LTIzVDE4OjEyOjM4LjAwMDAwMFoiLCJHSFNBLXBoOWMtN2h3OS12aGh3Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/ecosystem/maven/?cursor=WyIyMDI2LTA5LTIzVDE4OjEyOjM4LjAwMDAwMFoiLCJHSFNBLXBoOWMtN2h3OS12aGh3Il0>. Everything for agents: <https://agentprime.io/llms.txt>.