xmvn-tools vulnerabilities (SUSE)
14 vulnerabilities.
xmvn-toolsSUSELogback: Incomplete protection against CVE-2026-198806.3 Mediumxmvn-toolsSUSEIncomplete protection against CVE-2025-112266.3 Mediumxmvn-toolsSUSEIncomplete protection against CVE-2025-112267.0 Highxmvn-toolsSUSELogback deserialization whitelist bypass for Proxy objects2.9 Lowxmvn-toolsSUSELogback deserialization whitelist bypass for java.lang and java.util2.9 Lowxmvn-toolsSUSEMalicious logback.xml configuration file allows instantiation of arbitrary classes1.8 Lowxmvn-toolsSUSEConditional processing of logback.xml configuration file, in conjuction with Spring Framework and Janino7.0 Highxmvn-toolsSUSEApache Commons Lang, Apache Commons Lang: ClassUtils.getClass(...) can throw a StackOverflowError on very long inputs5.3 Mediumxmvn-toolsSUSESaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks2.4 Lowxmvn-toolsSUSEJaninoEventEvaluator vulnerability5.9 Mediumxmvn-toolsSUSEApache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file8.1 Highxmvn-toolsSUSEApache Commons Compress: OutOfMemoryError unpacking broken Pack200 file5.5 Mediumxmvn-toolsSUSEArbitrary file write via archive extraction (Zip Slip) vulnerability in sbt3.9 Lowxmvn-toolsSUSERCE from attacker with configuration edit priviledges through JNDI lookup6.6 Medium