{"id":"CVE-2018-10886","aliases":["DEBIAN-CVE-2018-10886","DLA-1431-1","DSA-4255-1","EUVD-2018-2950","SUSE-SU-2018:2789-1","SUSE-SU-2018:2838-1","SUSE-SU-2018:2866-1","SUSE-SU-2020:1351-1","SUSE-SU-2020:1352-1","UBUNTU-CVE-2018-10886","USN-3721-1","openSUSE-SU-2020:0703-1","openSUSE-SU-2024:10616-1"],"status":"rejected","title":"ant - security update","description":"DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: this candidate is not about any specific product, protocol, or design, that falls into the scope of the assigning CNA. Notes: None","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2018-07-16T00:00:00Z","modified":"2026-10-23T17:47:40Z","fixes":[{"ecosystem":"Debian:12","package":"ant","fixed_in":["1.10.4-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ant","fixed_in":["1.10.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ant","fixed_in":["1.10.4-1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"ant","fixed_in":["1.9.4-3+deb8u1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"ant","fixed_in":["1.9.9-1+deb9u1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"ant","fixed_in":["1.7.1-20.11.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"ant-antlr","fixed_in":["1.7.1-16.11.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"ant","fixed_in":["1.7.1-20.11.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"ant-antlr","fixed_in":["1.7.1-16.11.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"ant","fixed_in":["1.7.1-20.11.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"ant-antlr","fixed_in":["1.7.1-16.11.5.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"ant","fixed_in":["1.9.4-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"ant-antlr","fixed_in":["1.9.4-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"ant","fixed_in":["1.9.4-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ant","fixed_in":["1.9.4-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15","package":"ant","fixed_in":["1.9.10-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15","package":"ant-antlr","fixed_in":["1.9.10-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15","package":"ant-junit","fixed_in":["1.9.10-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"ant","fixed_in":["1.9.4-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"ant-antlr","fixed_in":["1.9.4-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"ant","fixed_in":["1.9.4-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"ant-antlr","fixed_in":["1.9.4-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"ant","fixed_in":["1.9.4-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"ant","fixed_in":["1.9.4-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ant","fixed_in":["1.9.4-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ant","fixed_in":["1.9.4-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP1","package":"ant","fixed_in":["1.9.10-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP1","package":"ant-antlr","fixed_in":["1.9.10-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP1","package":"ant-junit","fixed_in":["1.9.10-3.6.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"ant","fixed_in":["1.9.3-2ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"ant","fixed_in":["1.9.6-1ubuntu1.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"ant","fixed_in":["1.10.3-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"ant","fixed_in":["1.9.10-lp151.4.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"ant-antlr","fixed_in":["1.9.10-lp151.4.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.1","package":"ant-junit","fixed_in":["1.9.10-lp151.4.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.4-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-3+deb8u1"}]}],"versions":["1.9.4-3"]},{"source":"osv","ecosystem":"Debian:9","package":"ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.9-1+deb9u1"}]}],"versions":["1.9.9-1"]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-20.11.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"ant-antlr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-16.11.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-20.11.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"ant-antlr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-16.11.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-20.11.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"ant-antlr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.1-16.11.5.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"ant-antlr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15","package":"ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.10-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15","package":"ant-antlr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.10-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15","package":"ant-junit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.10-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"ant-antlr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"ant-antlr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.4-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP1","package":"ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.10-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP1","package":"ant-antlr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.10-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP1","package":"ant-junit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.10-3.6.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu0.1"}]}],"versions":["1.9.2-1","1.9.3-1","1.9.3-2","1.9.3-2build1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.6-1ubuntu1.1"}]}],"versions":["1.9.6-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.3-1ubuntu0.1"}]}],"versions":["1.9.9-4","1.9.9-5","1.9.9-6","1.9.10-1","1.9.10-2","1.10.3-1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.3-2ubuntu0.1"}]}],"versions":["1.9.2-1","1.9.3-1","1.9.3-2","1.9.3-2build1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.10-lp151.4.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"ant-antlr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.10-lp151.4.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"ant-junit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.10-lp151.4.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.10-1.2"}]}],"bundled":3}],"references":[{"url":"https://security-tracker.debian.org/tracker/CVE-2018-10886","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182789-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1100053","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-10886","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182838-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182866-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201351-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1133997","tags":["report"]},{"url":"https://bugzilla.suse.com/1134001","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2020/suse-su-20201352-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-10886","tags":["report"]},{"url":"https://snyk.io/research/zip-slip-vulnerability","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3721-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-10886","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FYDYD3MZN2O2HWJJEJVQKW25G3BTTIHR/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11979","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-1945","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-10886","description":"DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: this candidate is not about any specific product, protocol, or design, that falls into the scope of the assigning CNA. Notes: None","status":"rejected","published":"2018-07-16T19:00:00Z","modified":"2018-07-25T13:57:01Z","updated_at":"2026-11-02T14:35:01.619448Z"}],"euvd":[{"id":"EUVD-2018-2950","description":"DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: this candidate is not about any specific product, protocol, or design, that falls into the scope of the assigning CNA. Notes: None","status":"published","published":"2018-07-16T19:00:00Z","modified":"2018-07-25T13:57:01Z","updated_at":"2026-11-03T03:51:39.542012Z"}],"nvd":[{"id":"CVE-2018-10886","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: this candidate is not about any specific product, protocol, or design, that falls into the scope of the assigning CNA. Notes: None","status":"rejected","published":"2018-07-16T19:29:00.237Z","modified":"2023-11-07T02:51:34.13Z","updated_at":"2026-11-02T14:04:32.929986Z"}],"osv":[{"id":"CVE-2018-10886","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: this candidate is not about any specific product, protocol, or design, that falls into the scope of the assigning CNA. Notes: None","status":"published","published":"2018-07-16T19:29:00Z","modified":"2026-04-10T04:04:08.739758Z","updated_at":"2026-11-02T15:44:07.641418Z"},{"id":"DEBIAN-CVE-2018-10886","status":"published","published":"2018-07-16T19:29:00.237Z","modified":"2026-10-23T17:47:40.151199348Z","updated_at":"2026-11-02T15:45:29.988046Z"},{"id":"DLA-1431-1","title":"ant - security update","status":"published","published":"2018-07-19T00:00:00Z","modified":"2026-03-09T01:01:40.955453Z","updated_at":"2026-11-02T15:46:09.336894Z"},{"id":"DSA-4255-1","title":"ant - security update","status":"published","published":"2018-07-24T00:00:00Z","modified":"2026-03-09T02:09:36.413902Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"openSUSE-SU-2020:0703-1","title":"Security update for ant","description":"This update for ant fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-10886: Fixed a path traversal vulnerability in malformed zip file paths, which allowed arbitrary file writes and could potentially lead to code execution (bsc#1100053). \n\nNon-security issues fixed:\n\n- Add rhino to the ant-apache-bsf optional tasks (bsc#1134001).\n- Remove jakarta-commons-logging dependencies (bsc#1133997).\n- Use apache-commons-logging in optional tasks\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2020-05-23T18:14:17Z","modified":"2026-02-04T03:00:53.652334Z","updated_at":"2026-11-02T16:58:31.152112Z"},{"id":"openSUSE-SU-2024:10616-1","title":"ant-1.10.10-1.2 on GA media","description":"These are all security issues fixed in the ant-1.10.10-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:44:30.658723Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"SUSE-SU-2018:2789-1","title":"Security update for ant","description":"This update for ant fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-10886: Fixed a path traversal vulnerability in malformed zip file\n  paths, which allowed arbitrary file writes and could potentially lead to\n  code execution (bsc#1100053)\n\nOther changes made:\n\n- Removed support for javadoc\n- Default value for stripAbsolutePathSpec changed to 'true'\n","status":"published","published":"2018-09-21T11:51:26Z","modified":"2025-05-02T04:07:27.959389Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:2838-1","title":"Security update for ant","description":"This update for ant fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-10886: Fixed a path traversal vulnerability in malformed zip file\n  paths, which allowed arbitrary file writes and could potentially lead to\n  code execution (bsc#1100053)\n","status":"published","published":"2018-09-24T10:54:24Z","modified":"2026-02-04T02:26:15.937684Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2018:2866-1","title":"Security update for ant","description":"This update for ant fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-10886: Fixed a path traversal vulnerability in malformed zip file\n  paths, which allowed arbitrary file writes and could potentially lead to\n  code execution (bsc#1100053)\n","status":"published","published":"2018-09-26T06:04:10Z","modified":"2026-02-04T02:48:37.576442Z","updated_at":"2026-11-02T15:53:45.378228Z"},{"id":"SUSE-SU-2020:1351-1","title":"Security update for ant","description":"This update for ant fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-10886: Fixed a path traversal vulnerability in malformed zip file paths, which allowed arbitrary file writes and could potentially lead to code execution (bsc#1100053).\n\nNon-security issues fixed:\n\n- Add rhino to the ant-apache-bsf optional tasks (bsc#1134001).\n- Remove jakarta-commons-logging dependencies (bsc#1133997).\n- Use apache-commons-logging in optional tasks\n","status":"published","published":"2020-05-20T11:01:45Z","modified":"2026-02-04T04:21:36.489571Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"SUSE-SU-2020:1352-1","title":"Security update for ant","description":"This update for ant fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2018-10886: Fixed a path traversal vulnerability in malformed zip file paths, which allowed arbitrary file writes and could potentially lead to code execution (bsc#1100053). \n\nNon-security issues fixed:\n\n- Add rhino to the ant-apache-bsf optional tasks (bsc#1134001).\n- Remove jakarta-commons-logging dependencies (bsc#1133997).\n- Use apache-commons-logging in optional tasks\n","status":"published","published":"2020-05-20T11:02:14Z","modified":"2026-02-04T03:20:34.949465Z","updated_at":"2026-11-02T15:53:47.634847Z"},{"id":"UBUNTU-CVE-2018-10886","description":"Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none. Reason: this candidate is not about any specific product, protocol, or design, that falls into the scope of the assigning CNA. Notes: None","status":"published","published":"2018-07-16T00:00:00Z","modified":"2026-02-04T03:53:18.240919Z","updated_at":"2026-11-02T15:54:16.544091Z"},{"id":"USN-3721-1","title":"ant vulnerability","description":"Danny Grander discovered that Apache Ant incorrectly handled certain\ncompressed files. If a user or automated system were tricked into\nprocessing a specially crafted file, a remote attacker could use this issue\nto overwrite arbitrary files.\n","status":"published","published":"2018-07-24T17:58:31Z","modified":"2026-02-10T04:41:23Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}