{"id":"CVE-2026-91411","aliases":["ALPINE-CVE-2026-91411","BELL-CVE-2026-91411","DEBIAN-CVE-2026-91411","EUVD-2026-106663","GHSA-vhxj-84r5-67g5","UBUNTU-CVE-2026-91411","USN-9004-1","USN-9009-1","USN-9010-1"],"status":"published","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition as well as  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H).","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00267,"percentile":0.18976,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2026-10-20T21:25:49Z","modified":"2026-11-11T09:43:28Z","fixes":[{"ecosystem":"Alpine:v3.23","package":"openjdk17","fixed_in":["17.0.21.0.3_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openjdk17","fixed_in":["17.0.21.0.3_p1-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk-nik-23-17","fixed_in":["23.0.14-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk-nik-23-21","fixed_in":["23.1.13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk-nik-25-25","fixed_in":["25.0.5.0.3-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk11","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk11-container-jre","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk11-lite","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk11-perf","fixed_in":["11.0.33.0.3_p8-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk17","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk17-container-jre","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk17-crac","fixed_in":["17.0.21.0.3_p6-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk17-lite","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk21","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk21-container-jre","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk21-crac","fixed_in":["21.0.13.0.3_p6-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk21-lite","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk25","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk25-container-jre","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk25-lite","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk8","fixed_in":["8.513_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openjdk8-perf","fixed_in":["8.513_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk-nik-23-17","fixed_in":["23.0.14-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk-nik-23-21","fixed_in":["23.1.13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk-nik-25-25","fixed_in":["25.0.5.0.3-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk11","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk11-container-jre","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk11-lite","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk11-perf","fixed_in":["11.0.33.0.3_p8-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk17","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk17-container-jre","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk17-crac","fixed_in":["17.0.21.0.3_p6-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk17-lite","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk21","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk21-container-jre","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk21-crac","fixed_in":["21.0.13.0.3_p6-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk21-lite","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk25","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk25-container-jre","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk25-lite","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk8","fixed_in":["8.513_p9-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:25","package":"openjdk8-perf","fixed_in":["8.513_p10-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk-nik-23-17","fixed_in":["23.0.14-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk-nik-23-21","fixed_in":["23.1.13-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk-nik-25-25","fixed_in":["25.0.5.0.3-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk11","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk11-container-jre","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk11-lite","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk17","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk17-container-jre","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk17-crac","fixed_in":["17.0.21.0.3_p6-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk17-lite","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk21","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk21-container-jre","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk21-crac","fixed_in":["21.0.13.0.3_p6-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk21-lite","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk25","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk25-container-jre","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk25-lite","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"Alpaquita:stream","package":"openjdk8","fixed_in":["8.513_p9-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk-nik-23-17","fixed_in":["23.0.14-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk-nik-23-21","fixed_in":["23.1.13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk-nik-25-25","fixed_in":["25.0.5.0.3-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-container-jre","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-lite","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-perf","fixed_in":["11.0.33.0.3_p8-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-container-jre","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-crac","fixed_in":["17.0.21.0.3_p6-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-lite","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-container-jre","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-crac","fixed_in":["21.0.13.0.3_p6-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-lite","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk25-container-jre","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk25-lite","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk8","fixed_in":["8.513_p9-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:23","package":"openjdk8-perf","fixed_in":["8.513_p10-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk-nik-23-17","fixed_in":["23.0.14-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk-nik-23-21","fixed_in":["23.1.13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk-nik-25-25","fixed_in":["25.0.5.0.3-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-container-jre","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-lite","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-perf","fixed_in":["11.0.33.0.3_p8-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-container-jre","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-crac","fixed_in":["17.0.21.0.3_p6-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-lite","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-container-jre","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-crac","fixed_in":["21.0.13.0.3_p6-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-lite","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk25-container-jre","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk25-lite","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk8","fixed_in":["8.513_p9-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:25","package":"openjdk8-perf","fixed_in":["8.513_p10-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk-nik-23-17","fixed_in":["23.0.14-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk-nik-23-21","fixed_in":["23.1.13-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk-nik-25-25","fixed_in":["25.0.5.0.3-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk11-container-jre","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk11-lite","fixed_in":["11.0.33.0.3_p7-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-container-jre","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-crac","fixed_in":["17.0.21.0.3_p6-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-lite","fixed_in":["17.0.21.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-container-jre","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-crac","fixed_in":["21.0.13.0.3_p6-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-lite","fixed_in":["21.0.13.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk25-container-jre","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk25-lite","fixed_in":["25.0.5.0.3_p5-r0"],"sources":["osv"]},{"ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk8","fixed_in":["8.513_p9-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"openjdk-17","fixed_in":["17.0.21+9-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openjdk-21","fixed_in":["21.0.13+9-1~deb13u2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openjdk-21","fixed_in":["21.0.13+9-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openjdk-8","fixed_in":["8u512-b09~us1-0ubuntu1~16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-lts","fixed_in":["11.0.33+9-1ubuntu1~18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-8","fixed_in":["8u512-b09~us1-0ubuntu1~18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-lts","fixed_in":["11.0.33+9-1ubuntu1~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-8","fixed_in":["8u512-b09~us1-0ubuntu1~20.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-25","fixed_in":["25.0.5.0.3+1-1~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-8","fixed_in":["8u512-b09~us1-0ubuntu1~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-lts","fixed_in":["11.0.33+9-1ubuntu1~22.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-25","fixed_in":["25.0.5.0.3+1-1~24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-8","fixed_in":["8u512-b09~us1-0ubuntu1~24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-lts","fixed_in":["11.0.33+9-1ubuntu1~24.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.10","package":"openjdk-25","fixed_in":["25.0.5.0.3+1-1~26.10.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.10","package":"openjdk-8","fixed_in":["8u512-b09~us1-0ubuntu1~26.10.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.10","package":"openjdk-lts","fixed_in":["11.0.33+9-1ubuntu1~26.10.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-25","fixed_in":["25.0.5.0.3+1-1~26.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-8","fixed_in":["8u512-b09~us1-0ubuntu1~26.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-lts","fixed_in":["11.0.33+9-1ubuntu1~26.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.23","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.21.0.3_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.21.0.3_p1-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk-nik-23-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.0.4-r1"},{"fixed":"23.0.14-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk-nik-23-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.1.3-r1"},{"fixed":"23.1.13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk-nik-25-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.0.0-r0"},{"fixed":"25.0.5.0.3-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk11-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.20.1_p1-r0"},{"fixed":"11.0.33.0.3_p8-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.13_p13-r0"},{"fixed":"17.0.21.0.3_p6-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.5_p12-r0"},{"fixed":"21.0.13.0.3_p6-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u372_p7-r0"},{"fixed":"8.513_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openjdk8-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u392_p9-r1"},{"fixed":"8.513_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk-nik-23-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.0.8-r0"},{"fixed":"23.0.14-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk-nik-23-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.1.7-r0"},{"fixed":"23.1.13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk-nik-25-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.0.0-r0"},{"fixed":"25.0.5.0.3-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk11-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.29_p11-r0"},{"fixed":"11.0.33.0.3_p8-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r1"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p13-r1"},{"fixed":"17.0.21.0.3_p6-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r1"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p12-r1"},{"fixed":"21.0.13.0.3_p6-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.452_p11-r0"},{"fixed":"8.513_p9-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:25","package":"openjdk8-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.472_p10-r0"},{"fixed":"8.513_p10-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk-nik-23-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.0.4-r1"},{"fixed":"23.0.14-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk-nik-23-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.1.3-r1"},{"fixed":"23.1.13-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk-nik-25-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.0.0-r0"},{"fixed":"25.0.5.0.3-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.10_p13-r0"},{"fixed":"17.0.21.0.3_p6-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.2_p15-r0"},{"fixed":"21.0.13.0.3_p6-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"Alpaquita:stream","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u372_p7-r1"},{"fixed":"8.513_p9-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk-nik-23-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.0.4-r1"},{"fixed":"23.0.14-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk-nik-23-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.1.3-r1"},{"fixed":"23.1.13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk-nik-25-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.0.0-r0"},{"fixed":"25.0.5.0.3-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk11-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.20.1_p1-r0"},{"fixed":"11.0.33.0.3_p8-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.13_p13-r0"},{"fixed":"17.0.21.0.3_p6-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.5_p12-r0"},{"fixed":"21.0.13.0.3_p6-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u372_p7-r0"},{"fixed":"8.513_p9-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:23","package":"openjdk8-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u392_p9-r1"},{"fixed":"8.513_p10-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk-nik-23-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.0.8-r0"},{"fixed":"23.0.14-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk-nik-23-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.1.7-r0"},{"fixed":"23.1.13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk-nik-25-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.0.0-r0"},{"fixed":"25.0.5.0.3-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.27_p9-r0"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk11-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.29_p11-r0"},{"fixed":"11.0.33.0.3_p8-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p13-r1"},{"fixed":"17.0.21.0.3_p6-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.15_p10-r0"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p12-r1"},{"fixed":"21.0.13.0.3_p6-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.7_p9-r0"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.452_p11-r0"},{"fixed":"8.513_p9-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:25","package":"openjdk8-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8.472_p10-r0"},{"fixed":"8.513_p10-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk-nik-23-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.0.4-r1"},{"fixed":"23.0.14-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk-nik-23-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"23.1.3-r1"},{"fixed":"23.1.13-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk-nik-25-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25.0.0-r0"},{"fixed":"25.0.5.0.3-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk11-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r0"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk11-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11.0.19_p7-r1"},{"fixed":"11.0.33.0.3_p7-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r0"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.10_p13-r0"},{"fixed":"17.0.21.0.3_p6-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk17-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.0.7_p7-r1"},{"fixed":"17.0.21.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21.0.2_p15-r0"},{"fixed":"21.0.13.0.3_p6-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk21-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"21_p37-r0"},{"fixed":"21.0.13.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk25-container-jre","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk25-lite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"25_p37-r0"},{"fixed":"25.0.5.0.3_p5-r0"}]}]},{"source":"osv","ecosystem":"BellSoft Hardened Containers:stream","package":"openjdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"8u372_p7-r1"},{"fixed":"8.513_p9-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.0.21+9-1~deb12u1"}]}],"versions":["17.0.10+7-1","17.0.10+7-1~deb11u1","17.0.10+7-1~deb12u1","17.0.10+7-2","17.0.10+7-3","17.0.10~6ea-1","17.0.11+9-1","17.0.11+9-1~deb11u1","17.0.11+9-1~deb12u1","17.0.11~6ea-1","17.0.11~7ea-1","17.0.12+7-1","17.0.12+7-2","17.0.12+7-2~deb11u1","17.0.12+7-2~deb12u1","17.0.12~6ea-1","17.0.13+11-1","17.0.13+11-1~deb11u1","17.0.13+11-1~deb12u1","17.0.13+11-2","17.0.13+11-2~deb12u1","17.0.13~6ea-1","17.0.14+7-1","17.0.14+7-1~deb11u1","17.0.14+7-1~deb12u1","17.0.14~6ea-1","17.0.15+6-1","17.0.15+6-1~deb11u1","17.0.15+6-1~deb12u1","17.0.15~4ea-1","17.0.15~5ea-1","17.0.16+8-1","17.0.16+8-1~deb11u1","17.0.16+8-1~deb12u1","17.0.16~5ea-1","17.0.17+10-1","17.0.17+10-1~deb11u1","17.0.17+10-1~deb12u1","17.0.17~5ea-1","17.0.17~8ea-1","17.0.18+8-1","17.0.18+8-1~deb11u1","17.0.18+8-1~deb12u1","17.0.18~7ea-1","17.0.19+10-1","17.0.19+10-1~deb11u1","17.0.19+10-1~deb12u1","17.0.19+10-1~deb12u2","17.0.19~6ea-1","17.0.19~9ea-1","17.0.19~9ea-2","17.0.20+8-1","17.0.20+8-1~deb11u1","17.0.20+8-1~deb12u1","17.0.20+8-2","17.0.20.1+1-1","17.0.20.1+1-1~deb11u1","17.0.20.1+1-1~deb12u1","17.0.20~5ea-1","17.0.20~7ea-1","17.0.21~6ea-1","17.0.21~8ea-1","17.0.6+10-1","17.0.7+7-1","17.0.7+7-1~deb11u1","17.0.7+7-1~deb12u1","17.0.7+7-2","17.0.8+7-1","17.0.8+7-1~deb12u1","17.0.8~6-1","17.0.8~6-2","17.0.8~6-3","17.0.8~6-4","17.0.8~6-5","17.0.9+9-1","17.0.9+9-1~deb11u1","17.0.9+9-1~deb12u1","17.0.9+9-2","17.0.9~4ea-1","17.0.9~6ea-1"]},{"source":"osv","ecosystem":"Debian:13","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.13+9-1~deb13u2"}]}],"versions":["21.0.10+7-1","21.0.10+7-1~deb13u1","21.0.10~4ea-1","21.0.10~6ea-1","21.0.11+10-1","21.0.11+10-1~deb13u1","21.0.11+10-1~deb13u2","21.0.11~5ea-1","21.0.11~6ea-1","21.0.11~8ea-1","21.0.11~9ea-1","21.0.11~9ea-2","21.0.12+8-1","21.0.12+8-1~deb13u1","21.0.12+8-2","21.0.12.1+1-1","21.0.12.1+1-1~deb13u1","21.0.12~5ea-1","21.0.12~7ea-1","21.0.13+9-1~deb13u1","21.0.13~6ea-1","21.0.13~8ea-1","21.0.8+9-1","21.0.9+10-1","21.0.9+10-1~deb13u1","21.0.9~5ea-1","21.0.9~8ea-1"]},{"source":"osv","ecosystem":"Debian:14","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"21.0.13+9-1"}]}],"versions":["21.0.10+7-1","21.0.10+7-1~deb13u1","21.0.10~4ea-1","21.0.10~6ea-1","21.0.11+10-1","21.0.11+10-1~deb13u1","21.0.11+10-1~deb13u2","21.0.11~5ea-1","21.0.11~6ea-1","21.0.11~8ea-1","21.0.11~9ea-1","21.0.11~9ea-2","21.0.12+8-1","21.0.12+8-1~deb13u1","21.0.12+8-2","21.0.12.1+1-1","21.0.12.1+1-1~deb13u1","21.0.12~5ea-1","21.0.12~7ea-1","21.0.13+9-1~deb13u1","21.0.13+9-1~deb13u2","21.0.13~6ea-1","21.0.13~8ea-1","21.0.8+9-1","21.0.9+10-1","21.0.9+10-1~deb13u1","21.0.9~5ea-1","21.0.9~8ea-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u512-b09~us1-0ubuntu1~16.04.1"}]}],"versions":["8u66-b01-5","8u72-b05-1ubuntu1","8u72-b05-5","8u72-b05-6","8u72-b15-1","8u72-b15-2ubuntu1","8u72-b15-2ubuntu3","8u72-b15-3ubuntu1","8u77-b03-1ubuntu2","8u77-b03-3ubuntu1","8u77-b03-3ubuntu2","8u77-b03-3ubuntu3","8u91-b14-0ubuntu4~16.04.1","8u91-b14-3ubuntu1~16.04.1","8u111-b14-2ubuntu0.16.04.2","8u121-b13-0ubuntu1.16.04.2","8u131-b11-0ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.3","8u151-b12-0ubuntu0.16.04.2","8u162-b12-0ubuntu0.16.04.2","8u171-b11-0ubuntu0.16.04.1","8u181-b13-0ubuntu0.16.04.1","8u181-b13-1ubuntu0.16.04.1","8u191-b12-0ubuntu0.16.04.1","8u191-b12-2ubuntu0.16.04.1","8u212-b03-0ubuntu1.16.04.1","8u222-b10-1ubuntu1~16.04.1","8u232-b09-0ubuntu1~16.04.1","8u242-b08-0ubuntu3~16.04","8u252-b09-1~16.04","8u265-b01-0ubuntu2~16.04","8u272-b10-0ubuntu1~16.04","8u275-b01-0ubuntu1~16.04","8u282-b08-0ubuntu1~16.04","8u292-b10-0ubuntu1~16.04.1","8u312-b07-0ubuntu1~16.04","8u342-b07-0ubuntu1~16.04","8u352-ga-1~16.04","8u362-ga-0ubuntu1~16.04.1","8u372-ga~us1-0ubuntu1~16.04","8u382-ga-1~16.04.1","8u392-ga-1~16.04","8u432-ga~us1-0ubuntu2~16.04.4","8u442-b06~us1-0ubuntu1~16.04","8u452-ga~us1-0ubuntu1~16.04.1","8u462-ga~us1-0ubuntu2~16.04.2","8u472-ga-1~16.04","8u482-ga~us1-0ubuntu1~16.04","8u492-ga~us2-0ubuntu1~16.04.1","8u502-ga~us1-0ubuntu1~16.04","8u504-ga-1ubuntu1~16.04.3"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"openjdk-9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9~b88-1","9~b101-2ubuntu2","9~b102-1","9~b113-0ubuntu1","9~b114-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.33+9-1ubuntu1~18.04.1"}]}],"versions":["9.0.4+12-2ubuntu4","9.0.4+12-4ubuntu1","10~46-4ubuntu1","10~46-5ubuntu1","10.0.1+10-1ubuntu2","10.0.1+10-3ubuntu1","10.0.2+13-1ubuntu0.18.04.1","10.0.2+13-1ubuntu0.18.04.2","10.0.2+13-1ubuntu0.18.04.3","10.0.2+13-1ubuntu0.18.04.4","11.0.2+9-3ubuntu1~18.04.3","11.0.3+7-1ubuntu2~18.04.1","11.0.4+11-1ubuntu2~18.04.3","11.0.5+10-0ubuntu1.1~18.04","11.0.6+10-1ubuntu1~18.04.1","11.0.7+10-2ubuntu2~18.04","11.0.8+10-0ubuntu1~18.04.1","11.0.9+11-0ubuntu1~18.04.1","11.0.9.1+1-0ubuntu1~18.04","11.0.10+9-0ubuntu1~18.04","11.0.11+9-0ubuntu2~18.04","11.0.13+8-0ubuntu1~18.04","11.0.14+9-0ubuntu2~18.04","11.0.14.1+1-0ubuntu1~18.04","11.0.15+10-0ubuntu0.18.04.1","11.0.16+8-0ubuntu1~18.04","11.0.17+8-1ubuntu2~18.04","11.0.18+10-0ubuntu1~18.04.1","11.0.19+7~us1-0ubuntu1~18.04.1","11.0.20+8-1ubuntu1~18.04","11.0.20.1+1-0ubuntu1~18.04","11.0.21+9-0ubuntu1~18.04","11.0.22+7-0ubuntu2~18.04.1","11.0.23+9-1ubuntu1~18.04.1","11.0.25+9-1ubuntu1~18.04","11.0.26+4-1ubuntu1~18.04","11.0.27+6~us1-0ubuntu1~18.04","11.0.28+6-1ubuntu1~18.04.1","11.0.29+7-1ubuntu1~18.04","11.0.30+7-1ubuntu1~18.04","11.0.31+11-1ubuntu1~18.04.2","11.0.32+9-1ubuntu1~18.04","11.0.32.1+1-1ubuntu1~18.04"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["17+35-1~18.04","17.0.1+12-1~18.04","17.0.2+8-1~18.04","17.0.3+7-0ubuntu0.18.04.1","17.0.4+8-1~18.04","17.0.5+8-2ubuntu1~18.04","17.0.6+10-0ubuntu1~18.04.1","17.0.7+7~us1-0ubuntu1~18.04","17.0.8+7-1~18.04","17.0.8.1+1~us1-0ubuntu1~18.04","17.0.9+9-1~18.04","17.0.10+7-1~18.04.1","17.0.11+9-1~18.04.1","17.0.13+11-2ubuntu1~18.04.2","17.0.14+7-1~18.04","17.0.15+6~us1-0ubuntu1~18.04","17.0.16+8~us1-0ubuntu1~18.04.1","17.0.17+10-1~18.04","17.0.18+8-1~18.04","17.0.19+10-1~18.04.2","17.0.20+8-1~18.04","17.0.20.1+1-1~18.04","17.0.21.0.3+1-1~18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u512-b09~us1-0ubuntu1~18.04.1"}]}],"versions":["8u144-b01-2","8u151-b12-1","8u162-b12-1","8u171-b11-0ubuntu0.18.04.1","8u181-b13-0ubuntu0.18.04.1","8u181-b13-1ubuntu0.18.04.1","8u191-b12-0ubuntu0.18.04.1","8u191-b12-2ubuntu0.18.04.1","8u212-b03-0ubuntu1.18.04.1","8u222-b10-1ubuntu1~18.04.1","8u232-b09-0ubuntu1~18.04.1","8u242-b08-0ubuntu3~18.04","8u252-b09-1~18.04","8u265-b01-0ubuntu2~18.04","8u272-b10-0ubuntu1~18.04","8u275-b01-0ubuntu1~18.04","8u282-b08-0ubuntu1~18.04","8u292-b10-0ubuntu1~18.04","8u312-b07-0ubuntu1~18.04","8u342-b07-0ubuntu1~18.04","8u352-ga-1~18.04","8u362-ga-0ubuntu1~18.04.1","8u372-ga~us1-0ubuntu1~18.04","8u382-ga-1~18.04.1","8u392-ga-1~18.04","8u402-ga-2ubuntu1~18.04","8u412-ga-1~18.04.1","8u422-b05-1~18.04","8u432-ga~us1-0ubuntu2~18.04","8u442-b06~us1-0ubuntu1~18.04","8u452-ga~us1-0ubuntu1~18.04","8u462-ga~us1-0ubuntu2~18.04.2","8u472-ga-1~18.04","8u482-ga~us1-0ubuntu1~18.04","8u492-ga~us2-0ubuntu1~18.04.1","8u502-ga~us1-0ubuntu1~18.04","8u504-ga-1ubuntu1~18.04.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.33+9-1ubuntu1~20.04.1"}]}],"versions":["11.0.5+10-0ubuntu1","11.0.5+10-2ubuntu1","11.0.6+10-1ubuntu1","11.0.6+10-2ubuntu2","11.0.7+9-1ubuntu1","11.0.7+10-2ubuntu1","11.0.7+10-3ubuntu1","11.0.8+10-0ubuntu1~20.04","11.0.9+11-0ubuntu1~20.04","11.0.9.1+1-0ubuntu1~20.04","11.0.10+9-0ubuntu1~20.04","11.0.11+9-0ubuntu2~20.04","11.0.13+8-0ubuntu1~20.04","11.0.14+9-0ubuntu2~20.04","11.0.14.1+1-0ubuntu1~20.04","11.0.15+10-0ubuntu0.20.04.1","11.0.16+8-0ubuntu1~20.04","11.0.17+8-1ubuntu2~20.04","11.0.18+10-0ubuntu1~20.04.1","11.0.19+7~us1-0ubuntu1~20.04.1","11.0.20+8-1ubuntu1~20.04","11.0.20.1+1-0ubuntu1~20.04","11.0.21+9-0ubuntu1~20.04","11.0.22+7-0ubuntu2~20.04.1","11.0.23+9-1ubuntu1~20.04.2","11.0.24+8-1ubuntu3~20.04","11.0.25+9-1ubuntu1~20.04","11.0.26+4-1ubuntu1~20.04","11.0.27+6~us1-0ubuntu1~20.04","11.0.28+6-1ubuntu1~20.04.1","11.0.29+7-1ubuntu1~20.04","11.0.30+7-1ubuntu1~20.04","11.0.31+11-1ubuntu1~20.04.2","11.0.32+9-1ubuntu1~20.04","11.0.32.1+1-1ubuntu1~20.04"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["13+33-1","13.0.1+9-2","13.0.2+8-1","13.0.2+8-2","13.0.3+3-1ubuntu2","13.0.4+8-1~20.04","13.0.7+5-0ubuntu1~20.04"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openjdk-16","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["16.0.1+9-1~20.04"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["17+35-1~20.04","17.0.1+12-1~20.04","17.0.2+8-1~20.04","17.0.3+7-0ubuntu0.20.04.1","17.0.4+8-1~20.04","17.0.5+8-2ubuntu1~20.04","17.0.6+10-0ubuntu1~20.04.1","17.0.7+7~us1-0ubuntu1~20.04","17.0.8+7-1~20.04.2","17.0.8.1+1~us1-0ubuntu1~20.04","17.0.9+9-1~20.04","17.0.10+7-1~20.04.1","17.0.11+9-1~20.04.2","17.0.12+7-1ubuntu2~20.04","17.0.13+11-2ubuntu1~20.04","17.0.14+7-1~20.04","17.0.15+6~us1-0ubuntu1~20.04","17.0.16+8~us1-0ubuntu1~20.04.6","17.0.17+10-1~20.04","17.0.18+8-1~20.04","17.0.19+10-1~20.04.2","17.0.20+8-1~20.04","17.0.20.1+1-1~20.04","17.0.21.0.3+1-1~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.0.1+12-2~20.04.1","21.0.2+13-1~20.04.1","21.0.3+9-1ubuntu1~20.04.1","21.0.4+7-1ubuntu2~20.04","21.0.5+11-1ubuntu1~20.04","21.0.6+7-1~20.04.1","21.0.7+6~us1-0ubuntu1~20.04","21.0.8+9~us1-0ubuntu1~20.04.1","21.0.9+10-1~20.04","21.0.10+7-1~20.04","21.0.11+10-1~20.04.2","21.0.12+8-1~20.04","21.0.12.1+1-1~20.04.4","21.0.13.0.3+1-1~20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u512-b09~us1-0ubuntu1~20.04.1"}]}],"versions":["8u232-b09-0ubuntu1","8u232-b09-1","8u242-b04-1","8u242-b08-0ubuntu3","8u252-b07-1","8u252-b09-1ubuntu1","8u265-b01-0ubuntu2~20.04","8u272-b10-0ubuntu1~20.04","8u275-b01-0ubuntu1~20.04","8u282-b08-0ubuntu1~20.04","8u292-b10-0ubuntu1~20.04","8u312-b07-0ubuntu1~20.04","8u342-b07-0ubuntu1~20.04","8u352-ga-1~20.04","8u362-ga-0ubuntu1~20.04.1","8u372-ga~us1-0ubuntu1~20.04","8u382-ga-1~20.04.1","8u392-ga-1~20.04","8u402-ga-2ubuntu1~20.04","8u412-ga-1~20.04.1","8u422-b05-1~20.04","8u432-ga~us1-0ubuntu2~20.04","8u442-b06~us1-0ubuntu1~20.04","8u452-ga~us1-0ubuntu1~20.04","8u462-ga~us1-0ubuntu2~20.04.2","8u472-ga-1~20.04","8u482-ga~us1-0ubuntu1~20.04","8u492-ga~us2-0ubuntu1~20.04.1","8u502-ga~us1-0ubuntu1~20.04","8u504-ga-1ubuntu1~20.04.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["17+35-1","17.0.1+12-1","17.0.2+8-1","17.0.3+7-0ubuntu0.22.04.1","17.0.4+8-1~22.04","17.0.5+8-2ubuntu1~22.04","17.0.6+10-0ubuntu1~22.04","17.0.7+7~us1-0ubuntu1~22.04.2","17.0.8+7-1~22.04","17.0.8.1+1~us1-0ubuntu1~22.04","17.0.9+9-1~22.04","17.0.10+7-1~22.04.1","17.0.11+9-1~22.04.1","17.0.12+7-1ubuntu2~22.04","17.0.13+11-2ubuntu1~22.04","17.0.14+7-1~22.04.1","17.0.15+6~us1-0ubuntu1~22.04","17.0.16+8~us1-0ubuntu1~22.04.1","17.0.17+10-1~22.04","17.0.18+8-1~22.04.1","17.0.19+10-1~22.04.2","17.0.20+8-1~22.04","17.0.20.1+1-1~22.04","17.0.21.0.3+1-1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-18","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["18~15ea-4","18~20ea-1","18~32ea-1","18~36ea-1","18.0.2+9-2~22.04"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.0.1+12-2~22.04","21.0.2+13-1~22.04.1","21.0.3+9-1ubuntu1~22.04.1","21.0.4+7-1ubuntu2~22.04","21.0.5+11-1ubuntu1~22.04","21.0.6+7-1~22.04.1","21.0.7+6~us1-0ubuntu1~22.04","21.0.8+9~us1-0ubuntu1~22.04.1","21.0.9+10-1~22.04","21.0.10+7-1~22.04","21.0.11+10-1~22.04.2","21.0.12+8-1~22.04","21.0.12.1+1-1~22.04.4","21.0.13.0.3+1-1~22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.5.0.3+1-1~22.04.1"}]}],"versions":["25+36-1~22.04.2","25.0.1+8-1~22.04","25.0.2+10-1~22.04","25.0.3+9-2~22.04.2","25.0.4+7-1~22.04","25.0.4.1+1-1~22.04.4"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u512-b09~us1-0ubuntu1~22.04.1"}]}],"versions":["8u302-b08-0ubuntu2","8u312-b07-0ubuntu1","8u342-b07-0ubuntu1~22.04","8u352-ga-1~22.04","8u362-ga-0ubuntu1~22.04","8u372-ga~us1-0ubuntu1~22.04","8u382-ga-1~22.04.1","8u392-ga-1~22.04","8u402-ga-2ubuntu1~22.04","8u412-ga-1~22.04.1","8u422-b05-1~22.04","8u432-ga~us1-0ubuntu2~22.04","8u442-b06~us1-0ubuntu1~22.04","8u452-ga~us1-0ubuntu1~22.04","8u462-ga~us1-0ubuntu2~22.04.2","8u472-ga-1~22.04","8u482-ga~us1-0ubuntu1~22.04","8u492-ga~us2-0ubuntu1~22.04.1","8u502-ga~us1-0ubuntu1~22.04","8u504-ga-1ubuntu1~22.04.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.33+9-1ubuntu1~22.04.1"}]}],"versions":["11.0.12+7-0ubuntu3","11.0.13+8-0ubuntu1","11.0.14+9-0ubuntu2","11.0.14.1+1-0ubuntu1","11.0.15+10-0ubuntu0.22.04.1","11.0.16+8-0ubuntu1~22.04","11.0.17+8-1ubuntu2~22.04","11.0.18+10-0ubuntu1~22.04","11.0.19+7~us1-0ubuntu1~22.04.1","11.0.20+8-1ubuntu1~22.04","11.0.20.1+1-0ubuntu1~22.04","11.0.21+9-0ubuntu1~22.04","11.0.22+7-0ubuntu2~22.04.1","11.0.23+9-1ubuntu1~22.04.1","11.0.24+8-1ubuntu3~22.04","11.0.25+9-1ubuntu1~22.04","11.0.26+4-1ubuntu1~22.04","11.0.27+6~us1-0ubuntu1~22.04","11.0.28+6-1ubuntu1~22.04.1","11.0.29+7-1ubuntu1~22.04","11.0.30+7-1ubuntu1~22.04","11.0.31+11-1ubuntu1~22.04.2","11.0.32+9-1ubuntu1~22.04","11.0.32.1+1-1ubuntu1~22.04"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["17.0.9~6ea-1","17.0.9+9-1","17.0.9+9-2","17.0.10~6ea-1","17.0.10+7-1","17.0.11~7ea-1","17.0.11~7ea-1build1","17.0.11+9-1","17.0.12+7-1ubuntu2~24.04","17.0.13+11-2ubuntu1~24.04","17.0.14+7-1~24.04","17.0.15+6~us1-0ubuntu1~24.04","17.0.16+8~us1-0ubuntu1~24.04.1","17.0.17+10-1~24.04","17.0.18+8-1~24.04.1","17.0.19+10-1~24.04.2","17.0.20+8-1~24.04","17.0.20.1+1-1~24.04","17.0.21.0.3+1-1~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21+35-1","21.0.1+12-2","21.0.1+12-3","21.0.2+13-1","21.0.2+13-2","21.0.3~7ea-1","21.0.3~7ea-1build1","21.0.3~7ea-1build2","21.0.3+9-1","21.0.3+9-1ubuntu1","21.0.4+7-1ubuntu2~24.04","21.0.5+11-1ubuntu1~24.04","21.0.6+7-1~24.04.1","21.0.7+6~us1-0ubuntu1~24.04","21.0.8+9~us1-0ubuntu1~24.04.1","21.0.9+10-1~24.04","21.0.10+7-1~24.04","21.0.11+10-1~24.04.2","21.0.12+8-1~24.04","21.0.12.1+1-1~24.04.4","21.0.13.0.3+1-1~24.04.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.5.0.3+1-1~24.04.1"}]}],"versions":["25+36-1~24.04.2","25.0.1+8-1~24.04","25.0.2+10-1~24.04","25.0.3+9-2~24.04.2","25.0.4+7-1~24.04","25.0.4.1+1-1~24.04.4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u512-b09~us1-0ubuntu1~24.04.1"}]}],"versions":["8u382-ga-1ubuntu1","8u392-ga-1","8u402-ga-1","8u402-ga-2","8u402-ga-2ubuntu1","8u402-ga-2ubuntu6","8u402-ga-2ubuntu7","8u402-ga-8build1","8u412-ga-1~24.04.2","8u422-b05-1~24.04","8u432-ga~us1-0ubuntu2~24.04","8u442-b06~us1-0ubuntu1~24.04","8u452-ga~us1-0ubuntu1~24.04","8u462-ga~us1-0ubuntu2~24.04.2","8u472-ga-1~24.04","8u482-ga~us1-0ubuntu1~24.04","8u492-ga~us2-0ubuntu1~24.04.1","8u502-ga~us1-0ubuntu1~24.04","8u504-ga-1ubuntu1~24.04.3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.33+9-1ubuntu1~24.04.1"}]}],"versions":["11.0.20+8-1ubuntu1","11.0.21+9-0ubuntu1","11.0.22+7-0ubuntu2","11.0.23~7ea-1ubuntu1","11.0.23~7ea-1ubuntu2","11.0.23+9-1ubuntu1","11.0.24+8-1ubuntu3~24.04.1","11.0.25+9-1ubuntu1~24.04","11.0.26+4-1ubuntu1~24.04","11.0.27+6~us1-0ubuntu1~24.04","11.0.28+6-1ubuntu1~24.04.1","11.0.29+7-1ubuntu1~24.04","11.0.30+7-1ubuntu1~24.04","11.0.31+11-1ubuntu1~24.04.2","11.0.32+9-1ubuntu1~24.04","11.0.32.1+1-1ubuntu1~24.04"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["17.0.18+8-1","17.0.19+10-1","17.0.20~5ea-1","17.0.20+8-1","17.0.20.1+1-1","17.0.21~6ea-1","17.0.21.0.3+1-1~26.10.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["17.0.18+8-0ubuntu1","17.0.19+10-0ubuntu1","17.0.20+8-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.0.11~8ea-1","21.0.11+10-1","21.0.12~5ea-1","21.0.12+8-1","21.0.12.1+1-1","21.0.13.0.3+1-1~26.10.1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.0.10+7-0ubuntu1","21.0.11+10-0ubuntu1","21.0.12+8-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.5.0.3+1-1~26.10.1"}]}],"versions":["25.0.3~7ea-2","25.0.3+9-2","25.0.4~4ea-1","25.0.4+7-1","25.0.4.1+1-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u512-b09~us1-0ubuntu1~26.10.1"}]}],"versions":["8u482-ga~us1-0ubuntu1","8u492-ga~us2-0ubuntu2","8u502-ga~us1-0ubuntu1","8u504-ga-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.33+9-1ubuntu1~26.10.1"}]}],"versions":["11.0.30+7-1ubuntu1","11.0.31+11-1ubuntu2","11.0.32+9-1ubuntu1","11.0.32.1+1-1ubuntu1","11.0.32.1+1-1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-17","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["17.0.17~8ea-1","17.0.17+10-1","17.0.18~7ea-1","17.0.18+8-1","17.0.19+10-1~26.04.2","17.0.20+8-1~26.04","17.0.20.1+1-1~26.04","17.0.21.0.3+1-1~26.04.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-17-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["17.0.16+8-0ubuntu1","17.0.17+10-0ubuntu1","17.0.18+8-0ubuntu1","17.0.19+10-0ubuntu1~26.04.1","17.0.20+8-0ubuntu1~26.04"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-21","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.0.9~8ea-1","21.0.9+10-1","21.0.10~4ea-1","21.0.10~6ea-1","21.0.10+7-1","21.0.11~5ea-1","21.0.11~8ea-1","21.0.11+10-1~26.04.2","21.0.12+8-1~26.04","21.0.12.1+1-1~26.04.4","21.0.13.0.3+1-1~26.04.1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-21-crac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["21.0.8+9-0ubuntu1","21.0.9+10-0ubuntu1","21.0.10+7-0ubuntu1","21.0.11+10-0ubuntu1~26.04.1","21.0.12+8-0ubuntu1~26.04"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.5.0.3+1-1~26.04.1"}]}],"versions":["25+36-1","25.0.1+8-1","25.0.1+8-2","25.0.1+8-3","25.0.2+10-1","25.0.3~5ea-2","25.0.3~7ea-2","25.0.3+9-2~26.04.2","25.0.4+7-1~26.04","25.0.4.1+1-1~26.04.4"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u512-b09~us1-0ubuntu1~26.04.1"}]}],"versions":["8u462-ga-1","8u472-ga~us1-0ubuntu1","8u472-ga-1","8u482-ga~us1-0ubuntu1","8u492-ga~us2-0ubuntu1~26.04.1","8u502-ga~us1-0ubuntu1~26.04","8u504-ga-1ubuntu1~26.04.3"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.33+9-1ubuntu1~26.04.1"}]}],"versions":["11.0.28+6-1ubuntu1","11.0.29+7-1ubuntu1","11.0.30+7-1ubuntu1","11.0.31+11-1ubuntu1~26.04.2","11.0.32+9-1ubuntu1~26.04","11.0.32.1+1-1ubuntu1~26.04"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.5.0.3+1-1~22.04.1"}]}],"versions":["25+36-1~22.04.2","25.0.1+8-1~22.04","25.0.2+10-1~22.04","25.0.3+9-2~22.04.2","25.0.4+7-1~22.04","25.0.4.1+1-1~22.04.4"],"bundled":41},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.5.0.3+1-1~24.04.1"}]}],"versions":["25+36-1~24.04.2","25.0.1+8-1~24.04","25.0.2+10-1~24.04","25.0.3+9-2~24.04.2","25.0.4+7-1~24.04","25.0.4.1+1-1~24.04.4"],"bundled":41},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.5.0.3+1-1~26.10.1"}]}],"versions":["25.0.3~7ea-2","25.0.3+9-2","25.0.4~4ea-1","25.0.4+7-1","25.0.4.1+1-1"],"bundled":41},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"25.0.5.0.3+1-1~26.04.1"}]}],"versions":["25+36-1","25.0.1+8-1","25.0.1+8-2","25.0.1+8-3","25.0.2+10-1","25.0.3~5ea-2","25.0.3~7ea-2","25.0.3+9-2~26.04.2","25.0.4+7-1~26.04","25.0.4.1+1-1~26.04.4"],"bundled":41},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u512-b09~us1-0ubuntu1~16.04.1"}]}],"versions":["8u66-b01-5","8u72-b05-1ubuntu1","8u72-b05-5","8u72-b05-6","8u72-b15-1","8u72-b15-2ubuntu1","8u72-b15-2ubuntu3","8u72-b15-3ubuntu1","8u77-b03-1ubuntu2","8u77-b03-3ubuntu1","8u77-b03-3ubuntu2","8u77-b03-3ubuntu3","8u91-b14-0ubuntu4~16.04.1","8u91-b14-3ubuntu1~16.04.1","8u111-b14-2ubuntu0.16.04.2","8u121-b13-0ubuntu1.16.04.2","8u131-b11-0ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.2","8u131-b11-2ubuntu1.16.04.3","8u151-b12-0ubuntu0.16.04.2","8u162-b12-0ubuntu0.16.04.2","8u171-b11-0ubuntu0.16.04.1","8u181-b13-0ubuntu0.16.04.1","8u181-b13-1ubuntu0.16.04.1","8u191-b12-0ubuntu0.16.04.1","8u191-b12-2ubuntu0.16.04.1","8u212-b03-0ubuntu1.16.04.1","8u222-b10-1ubuntu1~16.04.1","8u232-b09-0ubuntu1~16.04.1","8u242-b08-0ubuntu3~16.04","8u252-b09-1~16.04","8u265-b01-0ubuntu2~16.04","8u272-b10-0ubuntu1~16.04","8u275-b01-0ubuntu1~16.04","8u282-b08-0ubuntu1~16.04","8u292-b10-0ubuntu1~16.04.1","8u312-b07-0ubuntu1~16.04","8u342-b07-0ubuntu1~16.04","8u352-ga-1~16.04","8u362-ga-0ubuntu1~16.04.1","8u372-ga~us1-0ubuntu1~16.04","8u382-ga-1~16.04.1","8u392-ga-1~16.04","8u432-ga~us1-0ubuntu2~16.04.4","8u442-b06~us1-0ubuntu1~16.04","8u452-ga~us1-0ubuntu1~16.04.1","8u462-ga~us1-0ubuntu2~16.04.2","8u472-ga-1~16.04","8u482-ga~us1-0ubuntu1~16.04","8u492-ga~us2-0ubuntu1~16.04.1","8u502-ga~us1-0ubuntu1~16.04","8u504-ga-1ubuntu1~16.04.3"],"bundled":37},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u512-b09~us1-0ubuntu1~18.04.1"}]}],"versions":["8u144-b01-2","8u151-b12-1","8u162-b12-1","8u171-b11-0ubuntu0.18.04.1","8u181-b13-0ubuntu0.18.04.1","8u181-b13-1ubuntu0.18.04.1","8u191-b12-0ubuntu0.18.04.1","8u191-b12-2ubuntu0.18.04.1","8u212-b03-0ubuntu1.18.04.1","8u222-b10-1ubuntu1~18.04.1","8u232-b09-0ubuntu1~18.04.1","8u242-b08-0ubuntu3~18.04","8u252-b09-1~18.04","8u265-b01-0ubuntu2~18.04","8u272-b10-0ubuntu1~18.04","8u275-b01-0ubuntu1~18.04","8u282-b08-0ubuntu1~18.04","8u292-b10-0ubuntu1~18.04","8u312-b07-0ubuntu1~18.04","8u342-b07-0ubuntu1~18.04","8u352-ga-1~18.04","8u362-ga-0ubuntu1~18.04.1","8u372-ga~us1-0ubuntu1~18.04","8u382-ga-1~18.04.1","8u392-ga-1~18.04","8u402-ga-2ubuntu1~18.04","8u412-ga-1~18.04.1","8u422-b05-1~18.04","8u432-ga~us1-0ubuntu2~18.04","8u442-b06~us1-0ubuntu1~18.04","8u452-ga~us1-0ubuntu1~18.04","8u462-ga~us1-0ubuntu2~18.04.2","8u472-ga-1~18.04","8u482-ga~us1-0ubuntu1~18.04","8u492-ga~us2-0ubuntu1~18.04.1","8u502-ga~us1-0ubuntu1~18.04","8u504-ga-1ubuntu1~18.04.3"],"bundled":37},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u512-b09~us1-0ubuntu1~20.04.1"}]}],"versions":["8u232-b09-0ubuntu1","8u232-b09-1","8u242-b04-1","8u242-b08-0ubuntu3","8u252-b07-1","8u252-b09-1ubuntu1","8u265-b01-0ubuntu2~20.04","8u272-b10-0ubuntu1~20.04","8u275-b01-0ubuntu1~20.04","8u282-b08-0ubuntu1~20.04","8u292-b10-0ubuntu1~20.04","8u312-b07-0ubuntu1~20.04","8u342-b07-0ubuntu1~20.04","8u352-ga-1~20.04","8u362-ga-0ubuntu1~20.04.1","8u372-ga~us1-0ubuntu1~20.04","8u382-ga-1~20.04.1","8u392-ga-1~20.04","8u402-ga-2ubuntu1~20.04","8u412-ga-1~20.04.1","8u422-b05-1~20.04","8u432-ga~us1-0ubuntu2~20.04","8u442-b06~us1-0ubuntu1~20.04","8u452-ga~us1-0ubuntu1~20.04","8u462-ga~us1-0ubuntu2~20.04.2","8u472-ga-1~20.04","8u482-ga~us1-0ubuntu1~20.04","8u492-ga~us2-0ubuntu1~20.04.1","8u502-ga~us1-0ubuntu1~20.04","8u504-ga-1ubuntu1~20.04.3"],"bundled":37},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u512-b09~us1-0ubuntu1~22.04.1"}]}],"versions":["8u302-b08-0ubuntu2","8u312-b07-0ubuntu1","8u342-b07-0ubuntu1~22.04","8u352-ga-1~22.04","8u362-ga-0ubuntu1~22.04","8u372-ga~us1-0ubuntu1~22.04","8u382-ga-1~22.04.1","8u392-ga-1~22.04","8u402-ga-2ubuntu1~22.04","8u412-ga-1~22.04.1","8u422-b05-1~22.04","8u432-ga~us1-0ubuntu2~22.04","8u442-b06~us1-0ubuntu1~22.04","8u452-ga~us1-0ubuntu1~22.04","8u462-ga~us1-0ubuntu2~22.04.2","8u472-ga-1~22.04","8u482-ga~us1-0ubuntu1~22.04","8u492-ga~us2-0ubuntu1~22.04.1","8u502-ga~us1-0ubuntu1~22.04","8u504-ga-1ubuntu1~22.04.3"],"bundled":37},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u512-b09~us1-0ubuntu1~24.04.1"}]}],"versions":["8u382-ga-1ubuntu1","8u392-ga-1","8u402-ga-1","8u402-ga-2","8u402-ga-2ubuntu1","8u402-ga-2ubuntu6","8u402-ga-2ubuntu7","8u402-ga-8build1","8u412-ga-1~24.04.2","8u422-b05-1~24.04","8u432-ga~us1-0ubuntu2~24.04","8u442-b06~us1-0ubuntu1~24.04","8u452-ga~us1-0ubuntu1~24.04","8u462-ga~us1-0ubuntu2~24.04.2","8u472-ga-1~24.04","8u482-ga~us1-0ubuntu1~24.04","8u492-ga~us2-0ubuntu1~24.04.1","8u502-ga~us1-0ubuntu1~24.04","8u504-ga-1ubuntu1~24.04.3"],"bundled":37},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u512-b09~us1-0ubuntu1~26.10.1"}]}],"versions":["8u482-ga~us1-0ubuntu1","8u492-ga~us2-0ubuntu2","8u502-ga~us1-0ubuntu1","8u504-ga-1ubuntu1"],"bundled":37},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8u512-b09~us1-0ubuntu1~26.04.1"}]}],"versions":["8u462-ga-1","8u472-ga~us1-0ubuntu1","8u472-ga-1","8u482-ga~us1-0ubuntu1","8u492-ga~us2-0ubuntu1~26.04.1","8u502-ga~us1-0ubuntu1~26.04","8u504-ga-1ubuntu1~26.04.3"],"bundled":37},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.33+9-1ubuntu1~18.04.1"}]}],"versions":["9.0.4+12-2ubuntu4","9.0.4+12-4ubuntu1","10~46-4ubuntu1","10~46-5ubuntu1","10.0.1+10-1ubuntu2","10.0.1+10-3ubuntu1","10.0.2+13-1ubuntu0.18.04.1","10.0.2+13-1ubuntu0.18.04.2","10.0.2+13-1ubuntu0.18.04.3","10.0.2+13-1ubuntu0.18.04.4","11.0.2+9-3ubuntu1~18.04.3","11.0.3+7-1ubuntu2~18.04.1","11.0.4+11-1ubuntu2~18.04.3","11.0.5+10-0ubuntu1.1~18.04","11.0.6+10-1ubuntu1~18.04.1","11.0.7+10-2ubuntu2~18.04","11.0.8+10-0ubuntu1~18.04.1","11.0.9+11-0ubuntu1~18.04.1","11.0.9.1+1-0ubuntu1~18.04","11.0.10+9-0ubuntu1~18.04","11.0.11+9-0ubuntu2~18.04","11.0.13+8-0ubuntu1~18.04","11.0.14+9-0ubuntu2~18.04","11.0.14.1+1-0ubuntu1~18.04","11.0.15+10-0ubuntu0.18.04.1","11.0.16+8-0ubuntu1~18.04","11.0.17+8-1ubuntu2~18.04","11.0.18+10-0ubuntu1~18.04.1","11.0.19+7~us1-0ubuntu1~18.04.1","11.0.20+8-1ubuntu1~18.04","11.0.20.1+1-0ubuntu1~18.04","11.0.21+9-0ubuntu1~18.04","11.0.22+7-0ubuntu2~18.04.1","11.0.23+9-1ubuntu1~18.04.1","11.0.25+9-1ubuntu1~18.04","11.0.26+4-1ubuntu1~18.04","11.0.27+6~us1-0ubuntu1~18.04","11.0.28+6-1ubuntu1~18.04.1","11.0.29+7-1ubuntu1~18.04","11.0.30+7-1ubuntu1~18.04","11.0.31+11-1ubuntu1~18.04.2","11.0.32+9-1ubuntu1~18.04","11.0.32.1+1-1ubuntu1~18.04"],"bundled":39},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.33+9-1ubuntu1~20.04.1"}]}],"versions":["11.0.5+10-0ubuntu1","11.0.5+10-2ubuntu1","11.0.6+10-1ubuntu1","11.0.6+10-2ubuntu2","11.0.7+9-1ubuntu1","11.0.7+10-2ubuntu1","11.0.7+10-3ubuntu1","11.0.8+10-0ubuntu1~20.04","11.0.9+11-0ubuntu1~20.04","11.0.9.1+1-0ubuntu1~20.04","11.0.10+9-0ubuntu1~20.04","11.0.11+9-0ubuntu2~20.04","11.0.13+8-0ubuntu1~20.04","11.0.14+9-0ubuntu2~20.04","11.0.14.1+1-0ubuntu1~20.04","11.0.15+10-0ubuntu0.20.04.1","11.0.16+8-0ubuntu1~20.04","11.0.17+8-1ubuntu2~20.04","11.0.18+10-0ubuntu1~20.04.1","11.0.19+7~us1-0ubuntu1~20.04.1","11.0.20+8-1ubuntu1~20.04","11.0.20.1+1-0ubuntu1~20.04","11.0.21+9-0ubuntu1~20.04","11.0.22+7-0ubuntu2~20.04.1","11.0.23+9-1ubuntu1~20.04.2","11.0.24+8-1ubuntu3~20.04","11.0.25+9-1ubuntu1~20.04","11.0.26+4-1ubuntu1~20.04","11.0.27+6~us1-0ubuntu1~20.04","11.0.28+6-1ubuntu1~20.04.1","11.0.29+7-1ubuntu1~20.04","11.0.30+7-1ubuntu1~20.04","11.0.31+11-1ubuntu1~20.04.2","11.0.32+9-1ubuntu1~20.04","11.0.32.1+1-1ubuntu1~20.04"],"bundled":39},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.33+9-1ubuntu1~22.04.1"}]}],"versions":["11.0.12+7-0ubuntu3","11.0.13+8-0ubuntu1","11.0.14+9-0ubuntu2","11.0.14.1+1-0ubuntu1","11.0.15+10-0ubuntu0.22.04.1","11.0.16+8-0ubuntu1~22.04","11.0.17+8-1ubuntu2~22.04","11.0.18+10-0ubuntu1~22.04","11.0.19+7~us1-0ubuntu1~22.04.1","11.0.20+8-1ubuntu1~22.04","11.0.20.1+1-0ubuntu1~22.04","11.0.21+9-0ubuntu1~22.04","11.0.22+7-0ubuntu2~22.04.1","11.0.23+9-1ubuntu1~22.04.1","11.0.24+8-1ubuntu3~22.04","11.0.25+9-1ubuntu1~22.04","11.0.26+4-1ubuntu1~22.04","11.0.27+6~us1-0ubuntu1~22.04","11.0.28+6-1ubuntu1~22.04.1","11.0.29+7-1ubuntu1~22.04","11.0.30+7-1ubuntu1~22.04","11.0.31+11-1ubuntu1~22.04.2","11.0.32+9-1ubuntu1~22.04","11.0.32.1+1-1ubuntu1~22.04"],"bundled":39},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.33+9-1ubuntu1~24.04.1"}]}],"versions":["11.0.20+8-1ubuntu1","11.0.21+9-0ubuntu1","11.0.22+7-0ubuntu2","11.0.23~7ea-1ubuntu1","11.0.23~7ea-1ubuntu2","11.0.23+9-1ubuntu1","11.0.24+8-1ubuntu3~24.04.1","11.0.25+9-1ubuntu1~24.04","11.0.26+4-1ubuntu1~24.04","11.0.27+6~us1-0ubuntu1~24.04","11.0.28+6-1ubuntu1~24.04.1","11.0.29+7-1ubuntu1~24.04","11.0.30+7-1ubuntu1~24.04","11.0.31+11-1ubuntu1~24.04.2","11.0.32+9-1ubuntu1~24.04","11.0.32.1+1-1ubuntu1~24.04"],"bundled":39},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.33+9-1ubuntu1~26.10.1"}]}],"versions":["11.0.30+7-1ubuntu1","11.0.31+11-1ubuntu2","11.0.32+9-1ubuntu1","11.0.32.1+1-1ubuntu1","11.0.32.1+1-1ubuntu2"],"bundled":39},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openjdk-lts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"11.0.33+9-1ubuntu1~26.04.1"}]}],"versions":["11.0.28+6-1ubuntu1","11.0.29+7-1ubuntu1","11.0.30+7-1ubuntu1","11.0.31+11-1ubuntu1~26.04.2","11.0.32+9-1ubuntu1~26.04","11.0.32.1+1-1ubuntu1~26.04"],"bundled":39}],"products":[{"vendor":"oracle corporation","product":"oracle graalvm enterprise edition"},{"vendor":"oracle corporation","product":"oracle graalvm for jdk"},{"vendor":"oracle corporation","product":"oracle java se"}],"references":[{"url":"https://www.oracle.com/security-alerts/cpuoct2026.html","tags":["vendor-advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-91411"},{"url":"https://github.com/advisories/GHSA-vhxj-84r5-67g5"},{"url":"https://security.alpinelinux.org/vuln/CVE-2026-91411","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2026-91411","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-91411","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-91411","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-91411","tags":["report"]},{"url":"https://openjdk.org/groups/vulnerability/advisories/2026-10-20","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-9009-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-9010-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-9004-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-83374","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-83376","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-83378","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-83380","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-83381","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-83387","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-83395","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-83400","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-87255","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-87290","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-87291","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-87292","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-87294","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-87367","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91332","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91333","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91334","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91335","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91373","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91374","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91375","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91379","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91380","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91382","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91394","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91397","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91398","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91400","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91403","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91410","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91415","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91418","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91451","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91452","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91453","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91461","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91462","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91463","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91464","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91487","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-87293","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91381","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91395","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91396","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2026-91417","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-91411","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition as well as  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H).","status":"published","published":"2026-10-20T21:25:49.588Z","modified":"2026-10-23T19:58:11.357Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:19:53.115938Z"}],"euvd":[{"id":"EUVD-2026-106663","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition as well as  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H).","status":"published","published":"2026-10-20T21:25:49Z","modified":"2026-10-23T19:58:11Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T16:59:31.865878Z"}],"ghsa":[{"id":"GHSA-vhxj-84r5-67g5","title":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition as well as  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H).","status":"published","published":"2026-10-21T00:33:29Z","modified":"2026-10-23T21:35:48Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"medium"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:14:20.706608Z"}],"nvd":[{"id":"CVE-2026-91411","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition as well as  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H).","status":"published","published":"2026-10-20T22:20:44.483Z","modified":"2026-10-23T20:17:29.437Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:13:02.045979Z"}],"osv":[{"id":"ALPINE-CVE-2026-91411","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition as well as  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H).","status":"published","published":"2026-10-20T22:20:44.483Z","modified":"2026-11-03T06:32:57.385023372Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-03T07:16:09.603409Z"},{"id":"BELL-CVE-2026-91411","status":"published","published":"2026-10-22T06:12:00.78986Z","modified":"2026-11-10T07:15:05.562111973Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-10T07:24:01.989533Z"},{"id":"DEBIAN-CVE-2026-91411","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition as well as  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H).","status":"published","published":"2026-10-20T22:20:44.483Z","modified":"2026-10-27T22:00:11.296410692Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-02T15:46:06.410207Z"},{"id":"UBUNTU-CVE-2026-91411","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition as well as  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H).","status":"published","published":"2026-10-20T22:20:00Z","modified":"2026-11-10T02:57:12.945161567Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H","level":"medium"}],"updated_at":"2026-11-10T03:20:58.564844Z"},{"id":"USN-9004-1","title":"openjdk-25 vulnerabilities","description":"It was discovered that the 2D component of OpenJDK 25 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to\ncause a denial of service or to read or modify sensitive data.\n(CVE-2026-91415)\n\nIt was discovered that the Networking component of OpenJDK 25 did not\ncorrectly authenticate users. A remote attacker could possibly use this\nissue to modify sensitive data. (CVE-2026-91398)\n\nIt was discovered that the 2D component of OpenJDK 25 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to\ncause a denial of service or to modify sensitive data. (CVE-2026-91382)\n\nIt was discovered that the JGSS component of OpenJDK 25 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to\ncause a denial of service or to modify sensitive data. (CVE-2026-91411)\n\nIt was discovered that the Networking component of OpenJDK 25 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto cause a denial of service or to modify sensitive data. (CVE-2026-83395)\n\nIt was discovered that the Security component of OpenJDK 25 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto read or modify sensitive data. (CVE-2026-83381, CVE-2026-87294)\n\nIt was discovered that the JAXP component of OpenJDK 25 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-87290)\n\nIt was discovered that the JDBC component of OpenJDK 25 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-83387)\n\nIt was discovered that the JGSS component of OpenJDK 25 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to\nmodify sensitive data. (CVE-2026-91462)\n\nIt was discovered that the Security component of OpenJDK 25 did not\ncorrectly authenticate users. A remote attacker could possibly use this\nissue to modify sensitive data. (CVE-2026-83374)\n\nIt was discovered that the Libraries component of OpenJDK 25 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto cause a denial of service. (CVE-2026-91410)\n\nIt was discovered that the Networking component of OpenJDK 25 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto modify sensitive data. (CVE-2026-87292, CVE-2026-91332, CVE-2026-91451,\nCVE-2026-91452)\n\nIt was discovered that the JSSE component of OpenJDK 25 did not correctly\nauthorize users. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2026-91373)\n\nIt was discovered that the JAAS component of OpenJDK 25 did not correctly\nauthorize users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-83380)\n\nIt was discovered that the JAXP component of OpenJDK 25 did not correctly\nauthorize users. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2026-83400)\n\nIt was discovered that the JGSS component of OpenJDK 25 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-91463, CVE-2026-91464)\n\nIt was discovered that the Lightweight HTTP Server component of OpenJDK 25\ndid not correctly authorize users. A remote attacker could possibly use\nthis issue to modify sensitive data. (CVE-2026-91453)\n\nIt was discovered that the ImageIO component of OpenJDK 25 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto cause a denial of service. (CVE-2026-91418)\n\nIt was discovered that the Compiler component of OpenJDK 25 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto read or modify sensitive data. (CVE-2026-91487)\n\nIt was discovered that the Serviceability component of OpenJDK 25 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto read or modify sensitive data. (CVE-2026-91374)\n\nIt was discovered that the Libraries component of OpenJDK 25 did not\ncorrectly authenticate users. A local attacker could possibly use this\nissue to modify sensitive data. (CVE-2026-91375)\n\nIt was discovered that the JDK tools component of OpenJDK 25 did not\ncorrectly authenticate users. A local attacker could possibly use this\nissue to modify sensitive data. (CVE-2026-91379)\n\nIt was discovered that the Utility component of OpenJDK 25 did not\ncorrectly authorize users. A local attacker could possibly use this issue\nto read or modify sensitive data. (CVE-2026-91380)\n\nIt was discovered that the ImageIO component of OpenJDK 25 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto read sensitive data. (CVE-2026-91334)\n\nIt was discovered that the JAXP component of OpenJDK 25 did not correctly\nauthorize users. A remote attacker could possibly use this issue to modify\nsensitive data. (CVE-2026-87367)\n\nIt was discovered that the JSSE component of OpenJDK 25 did not correctly\nauthorize users. A remote attacker could possibly use this issue to modify\nsensitive data. (CVE-2026-83376, CVE-2026-91461)\n\nIt was discovered that the Serviceability component of OpenJDK 25 did not\ncorrectly authorize users. A local attacker could possibly use this issue\nto cause a denial of service or to modify sensitive data. (CVE-2026-91397)\n\nIt was discovered that the Sound component of OpenJDK 25 did not correctly\nauthorize users. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2026-91400)\n\nIt was discovered that the AWT component of OpenJDK 25 did not correctly\nauthorize users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-91335)\n\nIt was discovered that the Networking component of OpenJDK 25 did not\ncorrectly authenticate users. A remote attacker could possibly use this\nissue to read sensitive data. (CVE-2026-91394)\n\nIt was discovered that the Networking component of OpenJDK 25 did not\ncorrectly authorize users. An unauthenticated remote attacker could\npossibly use this issue to read sensitive data. (CVE-2026-87291)\n\nIt was discovered that the Compiler component of OpenJDK 25 did not\ncorrectly authorize users. An unauthenticated remote attacker could\npossibly use this issue to read or modify sensitive data. (CVE-2026-83378)\n\nIt was discovered that the Compiler component of OpenJDK 25 did not\ncorrectly authorize users. An unauthenticated remote attacker could\npossibly use this issue to read sensitive data. (CVE-2026-87255)\n\nIt was discovered that the Security component of OpenJDK 25 did not\ncorrectly authorize users. An unauthenticated remote attacker could\npossibly use this issue to read or modify sensitive data. (CVE-2026-91333)\n\nIt was discovered that the JSSE component of OpenJDK 25 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to read\nor modify sensitive data. (CVE-2026-91403)\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttps://openjdk.org/groups/vulnerability/advisories/2026-10-20\nhttps://openjdk.org/groups/vulnerability/advisories/2026-10-21\nhttps://openjdk.org/groups/vulnerability/advisories/2026-10-24","status":"published","published":"2026-11-09T02:00:41Z","modified":"2026-11-11T09:43:28.933233687Z","updated_at":"2026-11-11T10:04:27.123105Z"},{"id":"USN-9009-1","title":"openjdk-8 vulnerabilities","description":"It was discovered that the Security component of OpenJDK 8 did not\ncorrectly authenticate users. A remote attacker could possibly use this\nissue to modify sensitive data. (CVE-2026-83374)\n\nIt was discovered that the JSSE component of OpenJDK 8 did not correctly\nauthorize users. A remote attacker could possibly use this issue to modify\nsensitive data. (CVE-2026-83376, CVE-2026-91461)\n\nIt was discovered that the JAAS component of OpenJDK 8 did not correctly\nauthorize users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-83380)\n\nIt was discovered that the Security component of OpenJDK 8 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto read or modify sensitive data. (CVE-2026-83381, CVE-2026-87294)\n\nIt was discovered that the JDBC component of OpenJDK 8 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-83387)\n\nIt was discovered that the Networking component of OpenJDK 8 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto cause a denial of service or to modify sensitive data. (CVE-2026-83395)\n\nIt was discovered that the JAXP component of OpenJDK 8 did not correctly\nauthorize users. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2026-83400)\n\nIt was discovered that the JAXP component of OpenJDK 8 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-87290)\n\nIt was discovered that the Networking component of OpenJDK 8 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto modify sensitive data. (CVE-2026-87292, CVE-2026-91451, CVE-2026-91452)\n\nIt was discovered that the RMI component of OpenJDK 8 did not correctly\nauthorize users. A remote attacker could possibly use this issue to read or\nmodify sensitive data. (CVE-2026-87293)\n\nIt was discovered that the JAXP component of OpenJDK 8 did not correctly\nauthorize users. A remote attacker could possibly use this issue to modify\nsensitive data. (CVE-2026-87367)\n\nIt was discovered that the ImageIO component of OpenJDK 8 did not correctly\nauthorize users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-91334)\n\nIt was discovered that the AWT component of OpenJDK 8 did not correctly\nauthorize users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-91335)\n\nIt was discovered that the JSSE component of OpenJDK 8 did not correctly\nauthorize users. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2026-91373)\n\nIt was discovered that the Serviceability component of OpenJDK 8 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto read or modify sensitive data. (CVE-2026-91374)\n\nIt was discovered that the Utility component of OpenJDK 8 did not correctly\nauthorize users. A local attacker could possibly use this issue to read or\nmodify sensitive data. (CVE-2026-91380)\n\nIt was discovered that the 2D component of OpenJDK 8 did not correctly\nauthorize users. A remote attacker could possibly use this issue to modify\nsensitive data. (CVE-2026-91381)\n\nIt was discovered that the 2D component of OpenJDK 8 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to\ncause a denial of service or to modify sensitive data. (CVE-2026-91382)\n\nIt was discovered that the Utility component of OpenJDK 8 did not correctly\nauthorize users. A remote attacker could possibly use this issue to cause a\ndenial of service or to modify sensitive data. (CVE-2026-91395,\nCVE-2026-91396)\n\nIt was discovered that the Serviceability component of OpenJDK 8 did not\ncorrectly authorize users. A local attacker could possibly use this issue\nto cause a denial of service or to modify sensitive data. (CVE-2026-91397)\n\nIt was discovered that the Networking component of OpenJDK 8 did not\ncorrectly authenticate users. A remote attacker could possibly use this\nissue to modify sensitive data. (CVE-2026-91398)\n\nIt was discovered that the Sound component of OpenJDK 8 did not correctly\nauthorize users. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2026-91400)\n\nIt was discovered that the JSSE component of OpenJDK 8 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to read\nor modify sensitive data. (CVE-2026-91403)\n\nIt was discovered that the Libraries component of OpenJDK 8 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto cause a denial of service. (CVE-2026-91410)\n\nIt was discovered that the JGSS component of OpenJDK 8 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to\ncause a denial of service or to modify sensitive data. (CVE-2026-91411)\n\nIt was discovered that the 2D component of OpenJDK 8 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to\ncause a denial of service or to read or modify sensitive data.\n(CVE-2026-91415)\n\nIt was discovered that the CORBA component of OpenJDK 8 did not correctly\nauthorize users. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2026-91417)\n\nIt was discovered that the ImageIO component of OpenJDK 8 did not correctly\nauthorize users. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2026-91418)\n\nIt was discovered that the Lightweight HTTP Server component of OpenJDK 8\ndid not correctly authorize users. A remote attacker could possibly use\nthis issue to modify sensitive data. (CVE-2026-91453)\n\nIt was discovered that the JGSS component of OpenJDK 8 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to\nmodify sensitive data. (CVE-2026-91462)\n\nIt was discovered that the JGSS component of OpenJDK 8 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-91463, CVE-2026-91464)\n\nIt was discovered that the Security component of OpenJDK 8 did not\ncorrectly authenticate users. A remote attacker could possibly use this\nissue to read or modify sensitive data. (CVE-2026-114820)\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttps://openjdk.org/groups/vulnerability/advisories/2026-10-20\nhttps://openjdk.org/groups/vulnerability/advisories/2026-10-21\nhttps://openjdk.org/groups/vulnerability/advisories/2026-10-24","status":"published","published":"2026-11-09T16:04:44Z","modified":"2026-11-10T02:58:35.574310504Z","updated_at":"2026-11-10T03:21:46.325253Z"},{"id":"USN-9010-1","title":"openjdk-lts vulnerabilities","description":"It was discovered that the Security component of OpenJDK 11 did not\ncorrectly authenticate users. A remote attacker could possibly use this\nissue to modify sensitive data. (CVE-2026-83374)\n\nIt was discovered that the JSSE component of OpenJDK 11 did not correctly\nauthorize users. A remote attacker could possibly use this issue to modify\nsensitive data. (CVE-2026-83376, CVE-2026-91461)\n\nIt was discovered that the JAAS component of OpenJDK 11 did not correctly\nauthorize users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-83380)\n\nIt was discovered that the Security component of OpenJDK 11 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto read or modify sensitive data. (CVE-2026-83381, CVE-2026-87294)\n\nIt was discovered that the JDBC component of OpenJDK 11 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-83387)\n\nIt was discovered that the Networking component of OpenJDK 11 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto cause a denial of service or to modify sensitive data. (CVE-2026-83395)\n\nIt was discovered that the JAXP component of OpenJDK 11 did not correctly\nauthorize users. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2026-83400)\n\nIt was discovered that the JAXP component of OpenJDK 11 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-87290)\n\nIt was discovered that the Networking component of OpenJDK 11 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto modify sensitive data. (CVE-2026-87292, CVE-2026-91332, CVE-2026-91451,\nCVE-2026-91452)\n\nIt was discovered that the JAXP component of OpenJDK 11 did not correctly\nauthorize users. A remote attacker could possibly use this issue to modify\nsensitive data. (CVE-2026-87367)\n\nIt was discovered that the ImageIO component of OpenJDK 11 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto read sensitive data. (CVE-2026-91334)\n\nIt was discovered that the AWT component of OpenJDK 11 did not correctly\nauthorize users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-91335)\n\nIt was discovered that the JSSE component of OpenJDK 11 did not correctly\nauthorize users. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2026-91373)\n\nIt was discovered that the Serviceability component of OpenJDK 11 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto read or modify sensitive data. (CVE-2026-91374)\n\nIt was discovered that the Libraries component of OpenJDK 11 did not\ncorrectly authenticate users. A local attacker could possibly use this\nissue to modify sensitive data. (CVE-2026-91375)\n\nIt was discovered that the JDK tools component of OpenJDK 11 did not\ncorrectly authenticate users. A local attacker could possibly use this\nissue to modify sensitive data. (CVE-2026-91379)\n\nIt was discovered that the Utility component of OpenJDK 11 did not\ncorrectly authorize users. A local attacker could possibly use this issue\nto read or modify sensitive data. (CVE-2026-91380)\n\nIt was discovered that the 2D component of OpenJDK 11 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to\ncause a denial of service or to modify sensitive data. (CVE-2026-91382)\n\nIt was discovered that the Networking component of OpenJDK 11 did not\ncorrectly authenticate users. A remote attacker could possibly use this\nissue to read sensitive data. (CVE-2026-91394)\n\nIt was discovered that the Utility component of OpenJDK 11 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto cause a denial of service or to modify sensitive data. (CVE-2026-91395,\nCVE-2026-91396)\n\nIt was discovered that the Serviceability component of OpenJDK 11 did not\ncorrectly authorize users. A local attacker could possibly use this issue\nto cause a denial of service or to modify sensitive data. (CVE-2026-91397)\n\nIt was discovered that the Networking component of OpenJDK 11 did not\ncorrectly authenticate users. A remote attacker could possibly use this\nissue to modify sensitive data. (CVE-2026-91398)\n\nIt was discovered that the Sound component of OpenJDK 11 did not correctly\nauthorize users. A remote attacker could possibly use this issue to cause a\ndenial of service. (CVE-2026-91400)\n\nIt was discovered that the JSSE component of OpenJDK 11 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to read\nor modify sensitive data. (CVE-2026-91403)\n\nIt was discovered that the Libraries component of OpenJDK 11 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto cause a denial of service. (CVE-2026-91410)\n\nIt was discovered that the JGSS component of OpenJDK 11 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to\ncause a denial of service or to modify sensitive data. (CVE-2026-91411)\n\nIt was discovered that the 2D component of OpenJDK 11 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to\ncause a denial of service or to read or modify sensitive data.\n(CVE-2026-91415)\n\nIt was discovered that the ImageIO component of OpenJDK 11 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto cause a denial of service. (CVE-2026-91418)\n\nIt was discovered that the Lightweight HTTP Server component of OpenJDK 11\ndid not correctly authorize users. A remote attacker could possibly use\nthis issue to modify sensitive data. (CVE-2026-91453)\n\nIt was discovered that the JGSS component of OpenJDK 11 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to\nmodify sensitive data. (CVE-2026-91462)\n\nIt was discovered that the JGSS component of OpenJDK 11 did not correctly\nauthenticate users. A remote attacker could possibly use this issue to read\nsensitive data. (CVE-2026-91463, CVE-2026-91464)\n\nIt was discovered that the Compiler component of OpenJDK 11 did not\ncorrectly authorize users. A remote attacker could possibly use this issue\nto read or modify sensitive data. (CVE-2026-91487)\n\nIt was discovered that the Security component of OpenJDK 11 did not\ncorrectly authenticate users. A remote attacker could possibly use this\nissue to read or modify sensitive data. (CVE-2026-114820)\n\nIn addition to security fixes, the updated packages contain bug fixes, new\nfeatures, and possibly incompatible changes.\n\nPlease see the following for more information:\nhttps://openjdk.org/groups/vulnerability/advisories/2026-10-20\nhttps://openjdk.org/groups/vulnerability/advisories/2026-10-21\nhttps://openjdk.org/groups/vulnerability/advisories/2026-10-24","status":"published","published":"2026-11-09T15:35:24Z","modified":"2026-11-10T02:58:32.268334912Z","updated_at":"2026-11-10T03:21:46.325253Z"}]}}