openjdk17

26 results · Clear filters · Feed

• High 7.0
  CVE-2026-91415

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Oct 20, 2026
• High 7.8
  CVE-2026-62574

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Alpine
  Jul 21, 2026
• High 7.5
  CVE-2026-47063

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Jul 21, 2026
• High 7.5
  CVE-2026-34282

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Apr 21, 2026
• High 7.5
  CVE-2026-22016 Public exploit

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Apr 21, 2026
• High 7.5
  CVE-2026-21945

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Jan 20, 2026
• High 7.4
  CVE-2026-21932

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Jan 20, 2026
• High 7.5
  CVE-2025-53066

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Oct 21, 2025
• High 8.1
  CVE-2025-50106

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Jul 15, 2025
• High 8.6
  CVE-2025-50059

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Jul 15, 2025
• High 8.1
  CVE-2025-30749 Public exploit

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Jul 15, 2025
• High 7.4
  CVE-2025-21587

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine
  Apr 15, 2025
• High 7.7
  CVE-2025-23083

  With the aid of the diagnostics_channel utility, an event can be hooked into whenever a worker thread is created. This …

  nodejs node openjdk17 nodejs Debian Alpine
  Jan 22, 2025
• High 7.4
  CVE-2024-21147

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine
  Jul 16, 2024
• High 7.5
  CVE-2024-21892

  On Linux, Node.js ignores certain environment variables if those may have been set by an unprivileged user while the pr…

  nodejs node openjdk17 nodejs Debian Alpine
  Feb 20, 2024
• High 7.4
  CVE-2024-20952

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine
  Jan 16, 2024
• High 7.5
  CVE-2024-20932

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Java SE JDK and JRE openjdk-9 openjdk-13 Debian Ubuntu Alpine
  Jan 16, 2024
• High 7.4
  CVE-2024-20918

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine
  Jan 16, 2024
• High 7.5
  CVE-2023-5072

  DoS Vulnerability in JSON-Java

  Denial of Service in JSON-Java versions up to and including 20230618.  A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used.

  https://github.com/stleary/JSON-java openjdk17 openjdk21 libjettison-java Debian Ubuntu Alpine Maven
  Oct 12, 2023
• High 7.5
  CVE-2023-30589

  llhttp vulnerable to HTTP request smuggling

  The llhttp parser in the http module in Node v20.2.0 does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling (HRS). The CR character (without LF) is sufficient to delimit HTTP header fields in the llhttp parse…

  nodejs node openjdk17 nodejs Debian Alpine npm
  Jun 30, 2023
• High 7.4
  CVE-2023-21930

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Sup…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine
  Apr 18, 2023
• High 7.5
  CVE-2023-25193

  hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger O(n^2) growth via consecutive marks duri…

  openjdk-lts openjdk-9 openjdk-13 openjdk11 Debian Ubuntu Alpine
  Feb 4, 2023
• High 7.5
  CVE-2022-34169 Public exploit EPSS 82%

  Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets

  The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are re…

  Apache Software Foundation Apache Xalan-J openjdk-8 openjdk-lts Debian Ubuntu Alpine Maven
  Jul 19, 2022
• High 7.7
  CVE-2022-25647 EPSS 12%

  Deserialization of Untrusted Data

  The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.

  openjdk11 openjdk17 openjdk15 openjdk13 Debian Ubuntu Alpine Maven
  May 1, 2022
• High 7.5
  CVE-2022-21476

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine
  Apr 19, 2022
• High 7.5
  CVE-2022-21449 Public exploit EPSS 77%

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)…

  Oracle Java SE JDK and JRE openjdk-16 openjdk-18 Debian Ubuntu Alpine
  Apr 19, 2022