javapackages-bootstrap vulnerabilities (Azure Linux)

17 vulnerabilities.

• javapackages-bootstrap Azure Linux Objenesis before 3.6 Type Confusion via Class Name Instantiator Cache CVE-2026-116486 Fix available 2.0 LowOctober 26, 2026
• javapackages-bootstrap Azure Linux OW2 ASM 1.4.3 before 9.11 Excessive Resource Consumption via Analyzer CVE-2026-110591 Fix available 6.8 MediumOctober 14, 2026
• javapackages-bootstrap Azure Linux OW2 ASM 3.0 before 9.11 Exponential Memory Allocation in JSRInlinerAdapter CVE-2026-110270 Fix available 6.8 MediumOctober 14, 2026
• javapackages-bootstrap Azure Linux OW2 ASM 3.0 before 9.11 Uncontrolled Recursion in SignatureReader CVE-2026-110263 Fix available 6.8 MediumOctober 14, 2026
• javapackages-bootstrap Azure Linux OW2 ASM 3.1 before 9.11 Excessive Memory Allocation in AdviceAdapter CVE-2026-110262 Fix available 4.8 MediumOctober 14, 2026
• javapackages-bootstrap Azure Linux OW2 ASM 3.0 before 9.11 Excessive CPU Consumption via ClassWriter COMPUTE_FRAMES CVE-2026-110261 Fix available 6.8 MediumOctober 14, 2026
• javapackages-bootstrap Azure Linux OW2 ASM 3.0 before 9.11 Quadratic Memory Allocation via Exception Handlers CVE-2026-110260 Fix available 6.8 MediumOctober 14, 2026
• javapackages-bootstrap Azure Linux OW2 ASM 3.0 before 9.11 Uncontrolled Recursion via ClassWriter.replaceAsmInstructions() CVE-2026-110259 Fix available 6.8 MediumOctober 14, 2026
• javapackages-bootstrap Azure Linux OW2 ASM 3.0 before 9.11 Excessive Memory Allocation via Multiple RET Instructions CVE-2026-110258 Fix available 6.8 MediumOctober 14, 2026
• javapackages-bootstrap Azure Linux OW2 ASM 5.0 before 9.11 Excessive Memory Allocation via BootstrapMethods Attribute CVE-2026-110257 Fix available 6.8 MediumOctober 14, 2026
• javapackages-bootstrap Azure Linux Denial of Service via Eager Array Allocation During Deserialization in Guava CVE-2026-102554 Fix available 8.2 HighOctober 9, 2026
• javapackages-bootstrap Azure Linux jsoup: Cleaner may expose markup with custom raw-text elements CVE-2026-71497 Fix available 4.7 MediumAugust 6, 2026
• javapackages-bootstrap Azure Linux AssertJ has XML External Entity (XXE) vulnerability when parsing untrusted XML via isXmlEqualTo assertion CVE-2026-24400 Fix available 8.2 HighJanuary 26, 2026
• javapackages-bootstrap Azure Linux Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file CVE-2024-25710 Fix available 8.1 HighFebruary 19, 2024
• javapackages-bootstrap Azure Linux Plexus Archiver vulnerable to Arbitrary File Creation in AbstractUnArchiver CVE-2023-37460 Public exploitFix available 8.1 HighJuly 25, 2023
• javapackages-bootstrap Azure Linux Apache Ant ZIP, and ZIP based, archive denial of service vulerability CVE-2021-36374 Fix available 5.5 MediumJuly 14, 2021
• javapackages-bootstrap Azure Linux Apache Ant TAR archive denial of service vulnerability CVE-2021-36373 Fix available 5.5 MediumJuly 14, 2021