https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-29T00:25:01.794171+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-116486 fkie_cve-2026-116486 2026-10-29T00:25:01.830520+00:00

Objenesis before 3.6 contains a type confusion vulnerability that allows code in one class loader to substitute objects into another by exploiting instantiator caching keyed on class name. When a shared ObjenesisStd instance caches instantiators by clazz.getName() in ObjenesisBase.getInstantiatorOf(), same-named classes collide, causing newInstance() to return wrong-class objects and ClassCastException failures.

 https://db.gcve.eu/vuln/ghsa-h635-rrqm-4mjq GHSA-h635-rrqm-4mjq 2026-10-29T00:25:01.830587+00:00

Objenesis before 3.6 contains a type confusion vulnerability that allows code in one class loader to substitute objects into another by exploiting instantiator caching keyed on class name. When a shared ObjenesisStd instance caches instantiators by clazz.getName() in ObjenesisBase.getInstantiatorOf(), same-named classes collide, causing newInstance() to return wrong-class objects and ClassCastException failures.

 https://db.gcve.eu/vuln/ubuntu-cve-2026-116486 UBUNTU-CVE-2026-116486 2026-10-29T00:25:01.830609+00:00

Affected: Ubuntu:14.04:LTS: objenesis, Ubuntu:16.04:LTS: objenesis, Ubuntu:18.04:LTS: objenesis, Ubuntu:20.04:LTS: objenesis, Ubuntu:22.04:LTS: objenesis, Ubuntu:24.04:LTS: objenesis, Ubuntu:26.10: objenesis, Ubuntu:26.04:LTS: objenesis

Objenesis before 3.6 contains a type confusion vulnerability that allows code in one class loader to substitute objects into another by exploiting instantiator caching keyed on class name. When a shared ObjenesisStd instance caches instantiators by clazz.getName() in ObjenesisBase.getInstantiatorOf(), same-named classes collide, causing newInstance() to return wrong-class objects and ClassCastException failures.