xmvn-mojo vulnerabilities (SUSE)
14 vulnerabilities.
xmvn-mojoSUSELogback: Incomplete protection against CVE-2026-198806.3 Mediumxmvn-mojoSUSEIncomplete protection against CVE-2025-112266.3 Mediumxmvn-mojoSUSEIncomplete protection against CVE-2025-112267.0 Highxmvn-mojoSUSELogback deserialization whitelist bypass for Proxy objects2.9 Lowxmvn-mojoSUSELogback deserialization whitelist bypass for java.lang and java.util2.9 Lowxmvn-mojoSUSEMalicious logback.xml configuration file allows instantiation of arbitrary classes1.8 Lowxmvn-mojoSUSEConditional processing of logback.xml configuration file, in conjuction with Spring Framework and Janino7.0 Highxmvn-mojoSUSEApache Commons Lang, Apache Commons Lang: ClassUtils.getClass(...) can throw a StackOverflowError on very long inputs5.3 Mediumxmvn-mojoSUSESaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks2.4 Lowxmvn-mojoSUSEJaninoEventEvaluator vulnerability5.9 Mediumxmvn-mojoSUSEApache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file8.1 Highxmvn-mojoSUSEApache Commons Compress: OutOfMemoryError unpacking broken Pack200 file5.5 Mediumxmvn-mojoSUSEArbitrary file write via archive extraction (Zip Slip) vulnerability in sbt3.9 Lowxmvn-mojoSUSERCE from attacker with configuration edit priviledges through JNDI lookup6.6 Medium