https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-09T06:32:25.503864+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-105111 fkie_cve-2026-105111 2026-10-09T06:32:25.559640+00:00

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Commons BCEL.

This only happens when you're using Class2HTML to generate webpages for possibly-attacker-controlled class files, where Class2HTML emitters write attacker class-file strings into HTML unescaped (stored XSS in reports).

This issue affects Apache Commons BCEL: before 6.13.0.

Users are recommended to upgrade to version 6.13.0, which fixes the issue.

 https://vulnerability.circl.lu/vuln/ghsa-vpf7-2j6x-pp68 GHSA-vpf7-2j6x-pp68 2026-10-09T06:32:25.559878+00:00

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Commons BCEL.

This only happens when you're using Class2HTML to generate webpages for possibly-attacker-controlled class files, where Class2HTML emitters write attacker class-file strings into HTML unescaped (stored XSS in reports).

This issue affects Apache Commons BCEL: before 6.13.0.

Users are recommended to upgrade to version 6.13.0, which fixes the issue.

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-105111 UBUNTU-CVE-2026-105111 2026-10-09T06:32:25.559931+00:00

Affected: Ubuntu:Pro:16.04:LTS: openjdk-8, Ubuntu:Pro:16.04:LTS: bcel, Ubuntu:16.04:LTS: openjdk-9, Ubuntu:Pro:18.04:LTS: openjdk-lts, Ubuntu:Pro:18.04:LTS: bcel, Ubuntu:Pro:18.04:LTS: openjdk-17, Ubuntu:Pro:18.04:LTS: openjdk-8, Ubuntu:Pro:20.04:LTS: openjdk-lts, Ubuntu:Pro:20.04:LTS: bcel, Ubuntu:20.04:LTS: openjdk-13 and 25 more

(Improper neutralization of input during web page generation ('cross-si ...)