https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 07 Nov 2026 08:26:27 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-73098 <p>Improper control of dynamically-loaded code vulnerability in Apache Juneau.</p> <p>When Apache Juneau parses a value into a property of type java.lang.Class (including parameterized forms), the default class swap loaded the named class with initialization enabled, so input naming a class on the application classpath ran that class&#39;s static initializer. The impact depends on the classes present in the deployment.</p> <p>This issue affects Apache Juneau: through 9.2.0.</p> <p>Users are recommended to upgrade to version 9.2.1, which fixes the issue.</p> <p>Improper control of dynamically-loaded code vulnerability in Apache Juneau.</p> <p>When Apache Juneau parses a value into a property of type java.lang.Class (including parameterized forms), the default class swap loaded the named class with initialization enabled, so input naming a class on the application classpath ran that class&#39;s static initializer. The impact depends on the classes present in the deployment.</p> <p>This issue affects Apache Juneau: through 9.2.0.</p> <p>Users are recommended to upgrade to version 9.2.1, which fixes the issue.</p> https://db.gcve.eu/vuln/fkie_cve-2026-73098 https://db.gcve.eu/vuln/ghsa-59fg-f5xc-xjg9 <p>Improper control of dynamically-loaded code vulnerability in Apache Juneau.</p> <p>When Apache Juneau parses a value into a property of type java.lang.Class (including parameterized forms), the default class swap loaded the named class with initialization enabled, so input naming a class on the application classpath ran that class&#39;s static initializer. The impact depends on the classes present in the deployment.</p> <p>This issue affects Apache Juneau: through 9.2.0.</p> <p>Users are recommended to upgrade to version 9.2.1, which fixes the issue.</p> <p>Improper control of dynamically-loaded code vulnerability in Apache Juneau.</p> <p>When Apache Juneau parses a value into a property of type java.lang.Class (including parameterized forms), the default class swap loaded the named class with initialization enabled, so input naming a class on the application classpath ran that class&#39;s static initializer. The impact depends on the classes present in the deployment.</p> <p>This issue affects Apache Juneau: through 9.2.0.</p> <p>Users are recommended to upgrade to version 9.2.1, which fixes the issue.</p> https://db.gcve.eu/vuln/ghsa-59fg-f5xc-xjg9