Skip to content

[GHSA-93g8-qqv3-mrx8] Apache CXF has JNDI Injection Vulnerability in JMSConfigFactory - #9525

Merged
advisory-database[bot] merged 1 commit into
liefke/advisory-improvement-9525from
liefke-GHSA-93g8-qqv3-mrx8
Oct 6, 2026
Merged

advisory-database[bot] merged 1 commit into
liefke/advisory-improvement-9525from
liefke-GHSA-93g8-qqv3-mrx8

Conversation

@liefke

@liefke liefke commented Sep 14, 2026

Copy link
Copy Markdown

Updates

  • Affected products
  • Description

Comments
The update of the CVE from Aug 07, 2026 includes the version 3.6.12 as fix version.

@github-actions
github-actions Bot changed the base branch from main to liefke/advisory-improvement-9525 September 14, 2026 17:29
@advisory-database
advisory-database Bot merged commit 5978a56 into liefke/advisory-improvement-9525 Oct 6, 2026
4 checks passed
@advisory-database

Copy link
Copy Markdown
Contributor

Hi @liefke! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!

@advisory-database
advisory-database Bot deleted the liefke-GHSA-93g8-qqv3-mrx8 branch October 6, 2026 19:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant