Skip to content
Swaldman vulnerabilities
Newest
-
swaldman mchange-commons-java
mchange-commons-java contains elements susceptible to abuse via JNDI injection and "deserialization gadgets"
CVE-2026-55153
Fix available
7.1 High
-
swaldman c3p0
c3p0 exposes a deserialization "sink" via JDBC DataSource bean properties
CVE-2026-55223
Fix available
6.3 Medium
-
swaldman c3p0, red hat build of apache camel - hawtio 4, build of apache camel 4.14.4 for spring boot 3.5.11 +15 more +17 more
c3p0 vulnerable to Remote Code Execution via unsafe deserialization of userOverridesAsString property
CVE-2026-27830
Fix available
8.9 High
-
swaldman mchange-commons-java, mchange commons java, red hat build of apache camel - hawtio 4 +17 more +19 more
mchange-commons-java: Remote Code Execution via JNDI Reference Resolution
CVE-2026-27727
Fix available
8.9 High
-
mchange c3p0, fedoraproject fedora, oracle communications ip service activator +8 more +10 more
Billion laughs attack in c3p0
CVE-2019-5427
Public exploitFix available
7.5 High