High
CVE-2026-68494
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 437
Reset filters
High
CVE-2026-54291
PostgreSQL JDBC Driver: Silent channel-binding authentication downgrade via unsupported certificate algorithms
High
CVE-2026-53712
OnGres SCRAM silent channel-binding authentication downgrade via unsupported certificate algorithms
High
CVE-2026-46560
OpenAM: Unauthenticated Authentication Bypass via RADIUS Spoofing
High
CVE-2026-54513
jackson-databind has an array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)
High
CVE-2026-54512
jackson-databind has a PolymorphicTypeValidator bypass via generic type parameters that allows arbitrary class instantiation
Medium
CVE-2026-50193
jackson-databind: Deeply nested JsonNode throws StackOverflowError for toString()
Medium
CVE-2026-55414
NL Portal Backend Libraries: Unauthenticated form resolver forwards the privileged Objecten-API token to a caller-supplied URL (SSRF)
Medium
CVE-2026-54683
NL Portal Backend Libraries: Document contents remained downloadable by any logged-in user (incomplete fix of CVE-2026-49463)
High
CVE-2026-56740
JLine3 Telnet server: Unauthenticated Remote Memory Exhaustion via Unbounded Telnet NEW-ENVIRON Variables
Critical
CVE-2026-55471
HAPI FHIR: XXE in XsltUtilities.saxonTransform via unhardened Saxon TransformerFactory
High
CVE-2026-50011
Netty: Unbounded pre-allocation in RedisArrayAggregator from RESP array length
Medium
CVE-2026-54697
ConnectBot SSH Client Library: Excessive allocation and integer overflow in DER private-key parsing
Medium
CVE-2026-54700
ConnectBot SSH Client Library: Unbounded SSH field lengths can cause excessive memory allocation
High
CVE-2026-48006
Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator
High
CVE-2026-46340
Netty: SCTP reassembly nests buffers without bound
High
CVE-2026-44890
Netty has Unbounded Direct Memory Consumption in its RedisDecoder
High
CVE-2026-44250
Netty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays
Medium
CVE-2026-9803
Keycloak has an Out-of-bounds Read
Medium
CVE-2026-41207
netty-incubator-codec-ohttp's HPKEContext operations may produce empty byte[] on failures
High
CVE-2026-45799
Wire: skipGroup() missing negative-length check allows 10-byte payload to crash any Wire-decoding service
Medium
CVE-2026-42586
Netty Redis Codec Encoder has a CRLF Injection Issue
High
CVE-2026-42440
Apache OpenNLP AbstractModelReader has an OOM Denial of Service via Unbounded Array Allocation
Critical
CVE-2026-41586
fabric-sdk-java has ObjectInputStream.readObject() without ObjectInputFilter, which allows Java deserialization RCE
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.