Maven Advisories.

OpenTelemetry Java SDK has Unbounded Memory Allocation in W3C Baggage Propagation

• Denial of service

<1.62.0 · fixed in 1.62.0

Amazon Redshift Vulnerable to Remote Code Execution via Unsafe Class Loading

• Code injection

<2.2.2 · fixed in 2.2.2

Apache Commons Configuration: StackOverflowError for YAML input with cycles

• Denial of service

>=2.2, <2.15.0 · fixed in 2.15.0

Goobi viewer - Core: Unauthenticated Solr Streaming Expression Proxy

• Authentication bypass

>=4.8.0, <=26.04 · no fixed version yet

Mapfish Print: Remote Code Injection (RCE) in Dynamic table

• Code injection

>=3.23.0, <3.28.28 || >=3.29.0, <3.30.30 || >=3.31.0, <3.31.21 || >=3.32.0, <3.33.14 || >=3.34.0, <4.0.3 · fixed in 3.28.28, 3.30.30, 3.31.21, 3.33.14, 4.0.3

Security feature bypass vulnerability in Azure Key Vault Keys library for Java

• Authentication bypass
• Weak cryptography or TLS

<4.10.6 · fixed in 4.10.6

Apache Tomcat - HTTP/2 request headers not validated

• CWE-20

>=8.5.0, <9.0.118 || >=10.1.0-M1, <10.1.55 || >=11.0.0-M1, <11.0.22 · fixed in 9.0.118, 10.1.55, 11.0.22

Apache Tomcat - Digest authenticator will authenticate any unknown user

• Authentication bypass
• CWE-592

<9.0.118 || >=10.1.0-M1, <10.1.55 || >=11.0.0-M1, <11.0.22 · fixed in 9.0.118, 10.1.55, 11.0.22

Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling

• Denial of service

<9.0.118 || >=10.1.0-M1, <10.1.55 || >=11.0.0-M1, <11.0.22 · fixed in 9.0.118, 10.1.55, 11.0.22

Apache Tomcat - WebSocket authentication header exposure

• Information disclosure

<9.0.118 || >=10.1.0-M1, <10.1.55 || >=11.0.0-M1, <11.0.22 · fixed in 9.0.118, 10.1.55, 11.0.22

Apache Tomcat - AJP secret compared in non-constant time

• CWE-208

<9.0.118 || >=10.1.0-M1, <10.1.55 || >=11.0.0-M1, <11.0.22 · fixed in 9.0.118, 10.1.55, 11.0.22

Apache Tomcat: LockOutRealm treats user names as case-sensitive

• CWE-178

<9.0.118 || >=10.1.0-M1, <10.1.55 || >=11.0.0-M1, <11.0.22 · fixed in 9.0.118, 10.1.55, 11.0.22

Apache Tomcat - Security constraints not correctly applied

• Broken access control

<9.0.118 || >=10.1.0-M1, <10.1.55 || >=11.0.0-M1, <11.0.22 · fixed in 9.0.118, 10.1.55, 11.0.22

sealed-env: TOTP secret embedded in unseal token payload (enterprise mode)

• Information disclosure
• Hard-coded credentials

<0.1.0-alpha.4 · fixed in 0.1.0-alpha.4

Spring AI: ChatMemory DEFAULT_CONVERSATION_ID causes unintended cross-user data leakage

• Broken access control

<1.0.7 || >=1.1.0-M1, <1.1.6 || >=2.0.0-M1, <2.0.0-M6 · fixed in 1.0.7, 1.1.6, 2.0.0-M6

Spring AI: Prompt Injection via Memory Poisoning in PromptChatMemoryAdvisor

• Code injection

<1.0.7 || >=1.1.0-M1, <1.1.6 · fixed in 1.0.7, 1.1.6

Unity Catalog has a JWT Issuer Validation Bypass tht Allows Complete User Impersonation

• Authentication bypass
• CWE-346

<0.4.1 · fixed in 0.4.1

Valtimo has sensitive data exposure through HTTP request/response logging in LoggingRestClientCustomizer

• Information disclosure

>=12.4.0, <12.33.0 || >=13.0.0, <13.26.0 · fixed in 12.33.0, 13.26.0

Spring AI's MilvusVectorStore#doDelete(List) implementation is vulnerable to filter-expression injection via unsanitized document IDs

• Code injection

>=1.0.0, <1.0.7 || >=1.1.0, <1.1.6 · fixed in 1.0.7, 1.1.6

Vert.x has a DoS via unbounded server-side SNI SslContext cache growth

• Weak cryptography or TLS
• Denial of service

>=4.3.4, <=4.3.8 || >=4.4.0, <=4.4.9 || >=4.5.0, <4.5.27 || >=5.0.0, <5.0.12 · fixed in 4.5.27, 5.0.12

epa4all-client has a VAU Signature bypass

• Weak cryptography or TLS

<1.2.1 · fixed in 1.2.1

bitcoinj has a ScriptExecution P2PKH/P2WPKH Verification Bypass

• Weak cryptography or TLS

>=0.15, <0.17.1 · fixed in 0.17.1

Apache NiFi is missing the Restricted annotation with the Execute Code Required Permission

• Broken access control

>=2.0.0-M1, <2.9.0 · fixed in 2.9.0

Bouncy Castle LTS native GCM chunking can cause bad-tag exception on decryption

• CWE-354
• CWE-1068

>=2.73.0, <2.73.11 · fixed in 2.73.11

Alkacon OpenCms allows remote unauthenticated attackers to obtain sensitive information

• XML external entities (XXE)

<10.5.1 · fixed in 10.5.1

Alkacon OpenCms is vulnerable to XXE when the <!DOCTYPE> refers to an external host

• XML external entities (XXE)

<16.0 · fixed in 16.0

Alkacon OpenCms is vulnerable to XSS via cmis-online/type

• Cross-site scripting (XSS)

<16.0 · fixed in 16.0

Alkacon OpenCms is vulnerable to XSS via updateModelGroups.jsp

• Cross-site scripting (XSS)

<16.0 · fixed in 16.0

Spring Cloud Config Server Logged Sensitive Information

• Information disclosure

>=3.1.0, <=3.1.13 || >=4.1.0, <=4.1.9 || >=4.2.0, <=4.2.6 || >=4.3.0, <4.3.3 || >=5.0.0, <5.0.3 || >=3.0.0, <=3.0.7 · fixed in 4.3.3, 5.0.3

Spring Cloud Config Server Susceptible To TOCTOU Attack

• Race condition

>=3.1.0, <=3.1.13 || >=4.1.0, <=4.1.9 || >=4.2.0, <=4.2.6 || >=4.3.0, <4.3.3 || >=5.0.0, <5.0.3 || >=3.0.0, <=3.0.7 · fixed in 4.3.3, 5.0.3

Spring Cloud Config vulnerable to Path Traversal

• Path traversal

<=3.1.13 || >=4.1.0, <=4.1.9 || >=4.2.0, <=4.2.6 || >=4.3.0, <4.3.3 || >=5.0.0, <5.0.3 · fixed in 4.3.3, 5.0.3

Spring Cloud Config has an Authorization Bypass Through User-Controlled Key

• Broken access control
• CWE-1220

>=3.1.0, <=3.1.13 || >=4.1.0, <=4.1.9 || >=4.2.0, <=4.2.6 || >=4.3.0, <4.3.3 || >=5.0.0, <5.0.3 · fixed in 4.3.3, 5.0.3

Netty MQTT: Resource exhaustion in MqttDecoder

• Denial of service

>=4.2.0.Alpha1, <4.2.13.Final || <4.1.133.Final · fixed in 4.2.13.Final, 4.1.133.Final

Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect

• Open redirect

<1.5.5 · fixed in 1.5.5

Netty: HttpContentDecompressor maxAllocation bypass when Content-Encoding set to br/zstd/snappy leads to decompression bomb DoS

• Denial of service

>=4.2.0.Alpha1, <4.2.13.Final || <4.1.133.Final · fixed in 4.2.13.Final, 4.1.133.Final

Netty Redis Codec Encoder has a CRLF Injection Issue

• Other injection

>=4.2.0.Alpha1, <4.2.13.Final || <4.1.133.Final · fixed in 4.2.13.Final, 4.1.133.Final

Netty vulnerable to HTTP Request Smuggling due to malformed Transfer-Encoding

• HTTP request smuggling

>=4.2.0.Alpha1, <4.2.13.Final || <4.1.133.Final · fixed in 4.2.13.Final, 4.1.133.Final

Netty has HttpClientCodec response desynchronization

• HTTP request smuggling

>=4.2.0.Alpha1, <4.2.13.Final || <4.1.133.Final · fixed in 4.2.13.Final, 4.1.133.Final

Netty Lz4FrameDecoder is vulnerable to resource exhaustion

• Denial of service

<4.1.133.Final · fixed in 4.1.133.Final

Netty HTTP/3 QPACK literal unbounded allocation

• Denial of service

>=4.2.0.Final, <4.2.13.Final · fixed in 4.2.13.Final

Netty HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization

• HTTP request smuggling

>=4.2.0.Alpha1, <4.2.13.Final || <4.1.133.Final · fixed in 4.2.13.Final, 4.1.133.Final

Netty vulnerable to HTTP Request Smuggling due to incorrect chunk size parsing

• Memory corruption
• HTTP request smuggling

>=4.2.0.Alpha1, <4.2.13.Final || <4.1.133.Final · fixed in 4.2.13.Final, 4.1.133.Final

Netty has a DNS Codec Input Validation Bypass (Encoder + Decoder)

• Denial of service
• CWE-20

>=4.2.0.Alpha1, <4.2.13.Final || <4.1.133.Final · fixed in 4.2.13.Final, 4.1.133.Final

Netty has HTTP Header Injection via HttpProxyHandler Disabled Validation (Incomplete Fix CVE-2025-67735)

• Other injection

<4.1.133.Final || >=4.2.0.Alpha1, <4.2.13.Final · fixed in 4.1.133.Final, 4.2.13.Final

OpenSearch has ineffective TLS certificate hostname verification

• Weak cryptography or TLS

>=2.18.0, <2.19.4.0 || >=3.0.0, <3.3.0.0 · fixed in 2.19.4.0, 3.3.0.0

OpenSearch Security plugin: DLS not applied on documents linked by has_child or has_parent relation

• Broken access control

>=1.0.0, <2.19.4.0 || >=3.0.0, <3.2.0.0 · fixed in 2.19.4.0, 3.2.0.0

OpenSearch vulnerable to improper authorization for Rollover Requests

• Broken access control

>=1.0.0, <2.19.4.0 || >=3.0.0, <3.2.0.0 · fixed in 2.19.4.0, 3.2.0.0

OpenSearch has a bypass of REST Layer Authorization Using Malformed Paths

• Broken access control

>=2.11.0.0, <2.19.0.0 · fixed in 2.19.0.0

Spring Cloud AWS missing SNS message signature verification allows spoofing of HTTP/HTTPS endpoint notifications

• CWE-345

>=4.0.0, <4.0.2 || >=3.0.0, <=3.4.2 · fixed in 4.0.2

axonflow-sdk-java: Webhook signing-key (HMAC-SHA256) not exposed by SDK type, preventing signature verification

• Weak cryptography or TLS
• CWE-345

<7.0.0 · fixed in 7.0.0

Netty epoll transport denial of service via RST on half-closed TCP connection

• Denial of service

>=4.2.0.Final, <4.2.13.Final · fixed in 4.2.13.Final

Valtimo has SpEL injection via StandardEvaluationContext that allows Remote Code Execution by admin users

• Code injection

>=13.0.0, <13.23.0 · fixed in 13.23.0

Micronaut has unbounded `formattersCache` in `TimeConverterRegistrar` that Allows Memory Exhaustion via `Accept-Language` Header

• Denial of service

>=4.3.0, <4.10.22 || >=3.10.0, <3.10.6 || <3.8.14 · fixed in 4.10.22, 3.10.6, 3.8.14

Micronaut has Unbounded `bundleCache` in `ResourceBundleMessageSource` that Allows Memory Exhaustion via `Accept-Language` Header

• Denial of service

>=4.10.0, <4.10.22 || >=3.10.0, <3.10.6 || <3.8.14 · fixed in 4.10.22, 3.10.6, 3.8.14

Apache Wicket has an Exposure of Sensitive Information to an Unauthorized Actor vulnerability

• Information disclosure

>=8.0.0-M1, <=8.17.0 || >=9.0.0-M1, <=9.22.0 || >=10.0.0-M1, <10.9.0 · fixed in 10.9.0

Apache Wicket has a Path Traversal issue

• Path traversal

>=8.0.0-M1, <=8.17.0 || >=9.0.0-M1, <=9.22.0 || >=10.0.0-M1, <10.9.0 · fixed in 10.9.0

Apache Wicket has a Session Fixation issue

• Authentication bypass

>=8.0.0-M1, <=8.17.0 || >=9.0.0-M1, <=9.22.0 || >=10.0.0-M1, <10.9.0 · fixed in 10.9.0

Apache Wicket has a Cross-site Scripting issue

• Cross-site scripting (XSS)

>=8.0.0-M1, <=8.17.0 || >=9.0.0-M1, <=9.22.0 || >=10.0.0-M1, <10.9.0 · fixed in 10.9.0

ArcadeDB vulnerable to cross-database authorization bypass and unsecured newly-created databases

• Broken access control

>=21.10.1, <26.4.2 · fixed in 26.4.2

jdbi3-freemarker Vulnerable to Improper Neutralization of Special Elements Used in FreeMarker Template Engine

• Code injection

<3.53.0 · fixed in 3.53.0