Skip to content
OpenAdvisories

Package · Debian

ognl

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.6
    CVE-2026-113730

    OGNL stricter-invocation block list bypass via java.lang.reflect reflection proxies

    OGNL is an Object Graph Navigation Library for Java. Prior to 3.4.13, the optional stricter-invocation mode in OgnlRuntime.invokeMethod checks the declaring class of the method that OGNL invokes but does not block java.lang.reflect.Method, java.lang.reflect.C…

    orphan-oss ognl ognl ognl:ognl Debian Ubuntu Maven