Package · Wolfi

maven-3.9

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

High 8.2

CVE-2026-102554

Denial of Service via Eager Array Allocation During Deserialization in Guava

Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashS…

Google Guava druid thingsboard-tb-node Debian Ubuntu Azure Linux Wolfi Maven

Oct 9, 2026
High 7.5

CVE-2026-54399

Apache HttpComponents Core: Unbounded HTTP Header/Line Length in Default Configuration

Uncontrolled Resource Consumption vulnerability in the HTTP/1.1 message parser in Apache HttpComponents Core (5.4.2 and earlier, 5.5-beta1 and earlier) allows an remote attacker to cause a denial of service through memory exhaustion by sending messages with e…

Apache Software Foundation Apache HttpComponents Core druid thingsboard-tb-node Debian Ubuntu Wolfi Maven

Jul 1, 2026
High 8.8

CVE-2025-67030

Plexus-Utils has a Directory Traversal vulnerability in its extractFile method

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code

druid akhq dependency-track-bundled dependency-track Debian Ubuntu Azure Linux Wolfi Maven

Mar 25, 2026