org.sonatype.security:security-system

1 result · Clear filters · Feed

• High 8.7
  CVE-2026-17600

  Nexus Repository 3 - Session Not Invalidated on User Account Deletion or Deactivation

  Sonatype Nexus Repository 3 did not immediately terminate a user's active login session or revoke their cached permissions when that user's account was deleted, deactivated, or had its password changed. A user whose account was already logged in at the time o…

  Sonatype Nexus Repository 3 org.sonatype.security:security-system org.sonatype.nexus.common.components:nexus-security
  Aug 7, 2026