openjdk21

97 results · Feed

• Low 3.7
  CVE-2024-21094

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine
  Apr 16, 2024
• Low 3.7
  CVE-2024-21068

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine
  Apr 16, 2024
• Low 3.7
  CVE-2024-21012

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Java SE JDK and JRE openjdk-lts openjdk-9 Debian Ubuntu Alpine
  Apr 16, 2024
• Low 3.7
  CVE-2024-21011

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine
  Apr 16, 2024
• Low 3.7
  CVE-2024-20954

  Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Co…

  Oracle GraalVM openjdk17 openjdk21 Alpine
  Apr 16, 2024
• High 7.5
  CVE-2024-21892

  On Linux, Node.js ignores certain environment variables if those may have been set by an unprivileged user while the pr…

  nodejs node openjdk17 nodejs Debian Alpine
  Feb 20, 2024
• Medium 4.7
  CVE-2024-20945

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine
  Feb 17, 2024
• Medium 5.9
  CVE-2024-20921

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine
  Feb 17, 2024
• Medium 5.9
  CVE-2024-20919

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine
  Feb 17, 2024
• High 7.4
  CVE-2024-20952

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine
  Jan 16, 2024
• High 7.4
  CVE-2024-20918

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine
  Jan 16, 2024
• Medium 4.8
  CVE-2023-22091

  Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Co…

  Oracle GraalVM Enterprise Edition openjdk-9 openjdk-13 Ubuntu Alpine
  Oct 17, 2023
• Medium 5.3
  CVE-2023-22081

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine
  Oct 17, 2023
• Low 3.7
  CVE-2023-22025

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, product of Oracle Java …

  Oracle Java SE JDK and JRE openjdk-8 openjdk-lts Debian Ubuntu Alpine
  Oct 17, 2023
• Low 3.9
  CVE-2023-45143

  Undici's cookie header not cleared on cross-origin redirect in fetch

  Undici is an HTTP/1.1 client written from scratch for Node.js. Prior to version 5.26.2, Undici already cleared Authorization headers on cross-origin redirects, but did not clear `Cookie` headers. By design, `cookie` headers are forbidden request headers, disa…

  nodejs undici nodejs openjdk21 Debian Ubuntu Alpine npm
  Oct 12, 2023
• High 7.5
  CVE-2023-5072

  DoS Vulnerability in JSON-Java

  Denial of Service in JSON-Java versions up to and including 20230618.  A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used.

  https://github.com/stleary/JSON-java openjdk17 openjdk21 libjettison-java Debian Ubuntu Alpine Maven
  Oct 12, 2023
• High 7.5
  CVE-2023-44487 Exploited Public exploit EPSS 100%

  HTTP/2 Stream Cancellation Attack

  The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

  nodejs go dotnet7 trafficserver Debian Ubuntu Alpine Maven Go SwiftURL
  Oct 10, 2023

  KEV Oct 10, 2023