Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Johnzon

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-71253

    Apache Johnzon: ClassConverter loads & static-initializes an attacker-named class from untrusted JSON

    Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Johnzon. ClassConverter loads & static-initializes an attacker-named class from untrusted JSON. This issue affects Apache Johnzon: from 1.0.0 before 2.2…

    Apache Software Foundation Apache Johnzon