xmvn-connector vulnerabilities (SUSE)
14 vulnerabilities.
xmvn-connectorSUSELogback: Incomplete protection against CVE-2026-198806.3 Mediumxmvn-connectorSUSEIncomplete protection against CVE-2025-112266.3 Mediumxmvn-connectorSUSEIncomplete protection against CVE-2025-112267.0 Highxmvn-connectorSUSELogback deserialization whitelist bypass for Proxy objects2.9 Lowxmvn-connectorSUSELogback deserialization whitelist bypass for java.lang and java.util2.9 Lowxmvn-connectorSUSEMalicious logback.xml configuration file allows instantiation of arbitrary classes1.8 Lowxmvn-connectorSUSEConditional processing of logback.xml configuration file, in conjuction with Spring Framework and Janino7.0 Highxmvn-connectorSUSEApache Commons Lang, Apache Commons Lang: ClassUtils.getClass(...) can throw a StackOverflowError on very long inputs5.3 Mediumxmvn-connectorSUSESaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks2.4 Lowxmvn-connectorSUSEJaninoEventEvaluator vulnerability5.9 Mediumxmvn-connectorSUSEApache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file8.1 Highxmvn-connectorSUSEApache Commons Compress: OutOfMemoryError unpacking broken Pack200 file5.5 Mediumxmvn-connectorSUSEArbitrary file write via archive extraction (Zip Slip) vulnerability in sbt3.9 Lowxmvn-connectorSUSERCE from attacker with configuration edit priviledges through JNDI lookup6.6 Medium