Skip to content
OpenAdvisories

Package · Maven

ome:pom-bio-formats

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2026-22187 Public exploit

    Bio-Formats <= 8.3.0 Memoizer Unsafe Deserialization via .bfmemo Cache Files

    Bio-Formats versions up to and including 8.3.0 perform unsafe Java deserialization of attacker-controlled memoization cache files (.bfmemo) during image processing. The loci.formats.Memoizer class automatically loads and deserializes memo files associated wit…