Skip to content
OpenAdvisories

Product · swaldman

mchange-commons-java

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-55153

    mchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadgets"

    mchange-commons-java is a Java library of shared utility classes used by mchange projects like the c3p0 connection pool. Prior to version 0.6.0, its JNDI ObjectFactory implementation (com.mchange.v2.naming.JavaBeanObjectFactory) will construct objects of arbi…

    swaldman mchange-commons-java c3p0 com.mchange:mchange-commons-java Ubuntu Maven
  • High 8.9
    CVE-2026-27727

    mchange-commons-java: Remote Code Execution via JNDI Reference Resolution

    mchange-commons-java, a library that provides Java utilities, includes code that mirrors early implementations of JNDI functionality, including support for remote `factoryClassLocation` values, by which code can be downloaded and invoked within a running appl…

    swaldman mchange-commons-java c3p0 com.mchange:mchange-commons-java Ubuntu Maven