{"grype_matches":[{"artifact":{"id":"185dfaac6029cdd7","cpes":["cpe:2.3:a:org.eclipse.jetty.ee8.security:jetty-ee8-security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty.ee8.security:jetty_ee8_security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:eclipse-jetty-project:jetty-ee8-security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:eclipse-jetty-project:jetty_ee8_security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:eclipse_jetty_project:jetty-ee8-security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:eclipse_jetty_project:jetty_ee8_security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty.ee8:jetty-ee8-security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty.ee8:jetty_ee8_security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty.ee8.security:security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty-ee8-security:jetty-ee8-security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty-ee8-security:jetty_ee8_security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty_ee8_security:jetty-ee8-security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty_ee8_security:jetty_ee8_security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty.ee8.security:jetty:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:eclipse-jetty-project:security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:eclipse_jetty_project:security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty.ee8:security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty-ee8:jetty-ee8-security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty-ee8:jetty_ee8_security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty_ee8:jetty-ee8-security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty_ee8:jetty_ee8_security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:eclipse-jetty-project:jetty:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:eclipse_jetty_project:jetty:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty-ee8-security:security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty_ee8_security:security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty.ee8:jetty:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:security:jetty-ee8-security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:security:jetty_ee8_security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jetty-ee8-security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jetty_ee8_security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty-ee8-security:jetty:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty:jetty-ee8-security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty:jetty_ee8_security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty_ee8_security:jetty:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:ee8:jetty-ee8-security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:ee8:jetty_ee8_security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty-ee8:security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty_ee8:security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:security:security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty-ee8:jetty:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty_ee8:jetty:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty:security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:security:jetty:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jetty:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:ee8:security:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty:jetty:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:ee8:jetty:12.0.33:*:*:*:*:*:*:*"],"name":"jetty-ee8-security","purl":"pkg:maven/org.eclipse.jetty.ee8/jetty-ee8-security@12.0.33","type":"java-archive","version":"12.0.33","language":"java","licenses":["https://www.eclipse.org/legal/epl-2.0/, https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.eclipse.jetty.ee8","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jetty-ee8-security-12.0.33.jar","manifestName":"","pomArtifactID":"jetty-ee8-security","archiveDigests":[{"value":"6a75f845a79b3f4458fa5fe46311e62facd9b719","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jetty-ee8-security-12.0.33.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"12.0.36"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-2fvj-hgj9-j2gr","versionConstraint":">=12.0.0,<=12.0.35 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.eclipse.jetty.ee8:jetty-ee8-security","version":"12.0.33"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-2fvj-hgj9-j2gr","fix":{"state":"fixed","versions":["12.0.36"],"available":[{"date":"2026-07-23","kind":"first-observed","version":"12.0.36"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-10050","cwe":"CWE-173","type":"Secondary","source":"emo@eclipse.org"},{"cve":"CVE-2026-10050","cwe":"CWE-303","type":"Secondary","source":"emo@eclipse.org"}],"epss":[{"cve":"CVE-2026-10050","date":"2026-11-12","epss":0.00632,"percentile":0.50814}],"risk":0.51192,"urls":["https://github.com/jetty/jetty.project/security/advisories/GHSA-2fvj-hgj9-j2gr","https://github.com/jetty/jetty.project/issues/15136","https://github.com/jetty/jetty.project/pull/15160","https://github.com/jetty/jetty.project/pull/15183","https://github.com/jetty/jetty.project/commit/4bcdbc7db387ce9e20e2c7571a7250280466221d","https://github.com/jetty/jetty.project/commit/d0bb829ccecbf19e3ad3d32f2649b2800f01222d","https://github.com/jetty/jetty.project/releases/tag/jetty-12.0.36","https://github.com/jetty/jetty.project/releases/tag/jetty-12.1.10"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-2fvj-hgj9-j2gr","description":"Eclipse Jetty Digest Authentication: ISO-8859-1 lossy encoding allows authentication bypass via character substitution"},"relatedVulnerabilities":[{"id":"CVE-2026-10050","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"emo@eclipse.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-10050","cwe":"CWE-173","type":"Secondary","source":"emo@eclipse.org"},{"cve":"CVE-2026-10050","cwe":"CWE-303","type":"Secondary","source":"emo@eclipse.org"}],"epss":[{"cve":"CVE-2026-10050","date":"2026-11-12","epss":0.00632,"percentile":0.50814}],"urls":["https://github.com/jetty/jetty.project/security/advisories/GHSA-2fvj-hgj9-j2gr","https://gitlab.eclipse.org/security/cve-assignment/-/work_items/120"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-10050","description":"In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes.\n\n\n\nThis was done because the initial specification for HTTP did not specify explicitly a charset, and it was assumed to be ISO-8859-1 for historical reasons.\n\n\n\nIf the password contains characters that cannot be represented in ISO-8859-1, they are silently replaced by `?`. This happens with passwords that contain Chinese, Cyrillic or Greek characters, for example: `αβ123` converts to `??123`.\n\n\n\nAn attacker can send a request with a digest `Authorization` header crafted with a password made of only `?` characters; the server would match any password of the same length that contains non-ISO-8859-1 characters.\n\n\n\nRecent HTTP Digest [RFC-7616](https://datatracker.ietf.org/doc/html/rfc7616) supports a `charset` parameters that defaults to UTF-8 that allows for correct encoding/decoding of passwords."}]},{"artifact":{"id":"aa07c6d10e1ccaf1","cpes":["cpe:2.3:a:io.netty.codec-http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:codec_http:4.2.15.Final:*:*:*:*:*:*:*"],"name":"netty-codec-http","purl":"pkg:maven/io.netty/netty-codec-http@4.2.15.Final","type":"java-archive","version":"4.2.15.Final","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0"],"metadata":{"pomGroupID":"io.netty","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-codec-http-4.2.15.Final.jar","manifestName":"","pomArtifactID":"netty-codec-http","archiveDigests":[{"value":"e611826aa054371bb9a17f27bdb05755a4cac5f0","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-codec-http-4.2.15.Final.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"4.2.16.Final"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-jppx-w49h-x2qq","versionConstraint":">=4.2.0.Final,<=4.2.15.Final (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"io.netty:netty-codec-http","version":"4.2.15.Final"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-jppx-w49h-x2qq","fix":{"state":"fixed","versions":["4.2.16.Final"],"available":[{"date":"2026-07-23","kind":"first-observed","version":"4.2.16.Final"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56745","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-56745","date":"2026-11-12","epss":0.0063,"percentile":0.50685}],"risk":0.5103,"urls":["https://github.com/netty/netty/security/advisories/GHSA-jppx-w49h-x2qq","https://nvd.nist.gov/vuln/detail/CVE-2026-56745","https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b","https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6","https://github.com/netty/netty/releases/tag/netty-4.1.136.Final","https://github.com/netty/netty/releases/tag/netty-4.2.16.Final"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-jppx-w49h-x2qq","description":"Netty: [SpdyHttpDecoder] ByteBuf Reference Leak on RST_STREAM Leads to Native Memory Exhaustion"},"relatedVulnerabilities":[{"id":"CVE-2026-56745","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56745","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-56745","date":"2026-11-12","epss":0.0063,"percentile":0.50685}],"urls":["https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b","https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6","https://github.com/netty/netty/releases/tag/netty-4.1.136.Final","https://github.com/netty/netty/releases/tag/netty-4.2.16.Final","https://github.com/netty/netty/security/advisories/GHSA-jppx-w49h-x2qq"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56745","description":"Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, the `SpdyHttpDecoder` handler in Netty's SPDY-to-HTTP codec allocates a pooled `ByteBuf` when processing a client-initiated `SYN_STREAM` frame with `FLAG_FIN=0` and stores the partially constructed `FullHttpRequest` in `messageMap`; when the remote peer sends `RST_STREAM` for that stream or the accumulated content exceeds `maxContentLength`, the decoder removes the entry but does not release the pooled `ByteBuf`, causing native memory exhaustion. This issue is fixed in versions 4.1.136.Final and 4.2.16.Final."}]},{"artifact":{"id":"aa07c6d10e1ccaf1","cpes":["cpe:2.3:a:io.netty.codec-http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:codec_http:4.2.15.Final:*:*:*:*:*:*:*"],"name":"netty-codec-http","purl":"pkg:maven/io.netty/netty-codec-http@4.2.15.Final","type":"java-archive","version":"4.2.15.Final","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0"],"metadata":{"pomGroupID":"io.netty","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-codec-http-4.2.15.Final.jar","manifestName":"","pomArtifactID":"netty-codec-http","archiveDigests":[{"value":"e611826aa054371bb9a17f27bdb05755a4cac5f0","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-codec-http-4.2.15.Final.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"4.2.16.Final"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-6jqx-86gh-f27w","versionConstraint":">=4.2.0.Final,<=4.2.15.Final (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"io.netty:netty-codec-http","version":"4.2.15.Final"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-6jqx-86gh-f27w","fix":{"state":"fixed","versions":["4.2.16.Final"],"available":[{"date":"2026-07-23","kind":"first-observed","version":"4.2.16.Final"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-55831","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-55831","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-55831","date":"2026-11-12","epss":0.00665,"percentile":0.523}],"risk":0.49874999999999997,"urls":["https://github.com/netty/netty/security/advisories/GHSA-6jqx-86gh-f27w","https://nvd.nist.gov/vuln/detail/CVE-2026-55831","https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b","https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6","https://github.com/netty/netty/releases/tag/netty-4.1.136.Final","https://github.com/netty/netty/releases/tag/netty-4.2.16.Final"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-6jqx-86gh-f27w","description":"Netty SPDY SETTINGS frame count materializes unbounded settings map"},"relatedVulnerabilities":[{"id":"CVE-2026-55831","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-55831","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-55831","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-55831","date":"2026-11-12","epss":0.00665,"percentile":0.523}],"urls":["https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b","https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6","https://github.com/netty/netty/releases/tag/netty-4.1.136.Final","https://github.com/netty/netty/releases/tag/netty-4.2.16.Final","https://github.com/netty/netty/security/advisories/GHSA-6jqx-86gh-f27w"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-55831","description":"Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final, Netty's SPDY SETTINGS decoder accepts a peer-declared SETTINGS entry count up to the 24-bit frame-length limit and materializes every unique setting ID in `DefaultSpdySettingsFrame`, allowing a remote SPDY/3.1 peer to send a syntactically valid roughly 2 MiB SETTINGS frame that creates 262144 map entries and amplifies network input into heap growth and ordered-map insertion work. This issue is fixed in versions 4.1.136.Final and 4.2.16.Final."}]},{"artifact":{"id":"aa07c6d10e1ccaf1","cpes":["cpe:2.3:a:io.netty.codec-http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:codec_http:4.2.15.Final:*:*:*:*:*:*:*"],"name":"netty-codec-http","purl":"pkg:maven/io.netty/netty-codec-http@4.2.15.Final","type":"java-archive","version":"4.2.15.Final","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0"],"metadata":{"pomGroupID":"io.netty","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-codec-http-4.2.15.Final.jar","manifestName":"","pomArtifactID":"netty-codec-http","archiveDigests":[{"value":"e611826aa054371bb9a17f27bdb05755a4cac5f0","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-codec-http-4.2.15.Final.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"4.2.16.Final"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-mvh2-crg5-v77c","versionConstraint":">=4.2.0.Final,<=4.2.15.Final (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"io.netty:netty-codec-http","version":"4.2.15.Final"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-mvh2-crg5-v77c","fix":{"state":"fixed","versions":["4.2.16.Final"],"available":[{"date":"2026-07-23","kind":"first-observed","version":"4.2.16.Final"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-55833","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-55833","date":"2026-11-12","epss":0.00665,"percentile":0.52299}],"risk":0.49874999999999997,"urls":["https://github.com/netty/netty/security/advisories/GHSA-mvh2-crg5-v77c","https://nvd.nist.gov/vuln/detail/CVE-2026-55833","https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b","https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6","https://github.com/netty/netty/releases/tag/netty-4.1.136.Final","https://github.com/netty/netty/releases/tag/netty-4.2.16.Final"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-mvh2-crg5-v77c","description":"Netty SPDY zlib header block continues decoded expansion after maxHeaderSize truncation"},"relatedVulnerabilities":[{"id":"CVE-2026-55833","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-55833","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-55833","date":"2026-11-12","epss":0.00665,"percentile":0.52299}],"urls":["https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b","https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6","https://github.com/netty/netty/releases/tag/netty-4.1.136.Final","https://github.com/netty/netty/releases/tag/netty-4.2.16.Final","https://github.com/netty/netty/security/advisories/GHSA-mvh2-crg5-v77c"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-55833","description":"Netty is a network application framework for development of protocol servers and clients. Prior to 4.1.136.Final and 4.2.16.Final, Netty SPDY header decoding continues inflating zlib-compressed header blocks after the raw header parser has exceeded `maxHeaderSize` and marked the frame truncated in `SpdyFrameCodec`, allowing a remote peer to send a small compressed `HEADERS` block that expands into much larger raw header data and causes compression-amplified CPU and allocation churn. This issue is fixed in versions 4.1.136.Final and 4.2.16.Final."}]},{"artifact":{"id":"a642baa7504f48aa","cpes":["cpe:2.3:a:io.netty.codec-http2:netty-codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http2:netty_codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http2:netty-codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http2:netty_codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http2:netty-codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http2:netty_codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http2:codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http2:codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty-codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty_codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty-codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty_codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http2:netty-codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http2:netty_codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http2:netty-codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http2:netty_codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http2:codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http2:codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:netty-codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:netty_codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:netty-codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:netty_codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http2:codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http2:codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty-codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty_codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http2:codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http2:codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:netty-codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:netty_codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http2:codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http2:codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty-codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty_codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:codec_http2:4.2.15.Final:*:*:*:*:*:*:*"],"name":"netty-codec-http2","purl":"pkg:maven/io.netty/netty-codec-http2@4.2.15.Final","type":"java-archive","version":"4.2.15.Final","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0"],"metadata":{"pomGroupID":"io.netty","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-codec-http2-4.2.15.Final.jar","manifestName":"","pomArtifactID":"netty-codec-http2","archiveDigests":[{"value":"c70540243427c8c952473f55813c6d459817de42","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-codec-http2-4.2.15.Final.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"4.2.16.Final"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-93wv-jw9v-4972","versionConstraint":">=4.2.0,<=4.2.15.Final (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"io.netty:netty-codec-http2","version":"4.2.15.Final"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-93wv-jw9v-4972","fix":{"state":"fixed","versions":["4.2.16.Final"],"available":[{"date":"2026-08-01","kind":"first-observed","version":"4.2.16.Final"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56819","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-56819","cwe":"CWE-401","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-56819","date":"2026-11-12","epss":0.00665,"percentile":0.52299}],"risk":0.49874999999999997,"urls":["https://github.com/netty/netty/security/advisories/GHSA-93wv-jw9v-4972","https://nvd.nist.gov/vuln/detail/CVE-2026-56819","https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b","https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6","https://github.com/netty/netty/releases/tag/netty-4.1.136.Final","https://github.com/netty/netty/releases/tag/netty-4.2.16.Final"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-93wv-jw9v-4972","description":"Netty: HTTP/2 decompression leaks ByteBuf reference count when the decompressor channel is already closed (Direct memory leak / OOM DoS)"},"relatedVulnerabilities":[{"id":"CVE-2026-56819","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56819","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-56819","cwe":"CWE-401","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-56819","date":"2026-11-12","epss":0.00665,"percentile":0.52299}],"urls":["https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b","https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6","https://github.com/netty/netty/releases/tag/netty-4.1.136.Final","https://github.com/netty/netty/releases/tag/netty-4.2.16.Final","https://github.com/netty/netty/security/advisories/GHSA-93wv-jw9v-4972"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56819","description":"Netty is a network application framework for development of protocol servers and clients. In versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, a remote unauthenticated peer can leak one direct `ByteBuf` per HTTP/2 `DATA` frame in applications that enable HTTP/2 content decompression via `DelegatingDecompressorFrameListener`. When a `DATA` frame is processed for a stream whose decompressor has already been closed, `Http2Decompressor.decompress(...)` calls `decompressor.writeInbound(data.retain())` and does not release the retained buffer on the error path, eventually exhausting direct memory and crashing the JVM. This issue is fixed in versions 4.1.136.Final and 4.2.16.Final."}]},{"artifact":{"id":"da3c35d805b04790","cpes":["cpe:2.3:a:io.netty.codec-http3:netty-codec-http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http3:netty_codec_http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http3:netty-codec-http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http3:netty_codec_http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http3:netty-codec-http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http3:netty_codec_http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http3:codec-http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http3:codec_http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty-codec-http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty_codec_http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty-codec-http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty_codec_http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http3:netty-codec-http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http3:netty_codec_http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http3:netty-codec-http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http3:netty_codec_http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http3:codec-http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http3:codec_http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:netty-codec-http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:netty_codec_http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:netty-codec-http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:netty_codec_http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http3:codec-http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http3:codec_http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty-codec-http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty_codec_http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:codec-http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:codec_http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:codec-http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:codec_http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http3:codec-http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http3:codec_http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:netty-codec-http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:netty_codec_http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http3:codec-http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http3:codec_http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:codec-http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:codec_http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty-codec-http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty_codec_http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:codec-http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:codec_http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:codec-http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:codec_http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:codec-http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:codec_http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:codec-http3:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:codec_http3:4.2.15.Final:*:*:*:*:*:*:*"],"name":"netty-codec-http3","purl":"pkg:maven/io.netty/netty-codec-http3@4.2.15.Final","type":"java-archive","version":"4.2.15.Final","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0"],"metadata":{"pomGroupID":"io.netty","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-codec-http3-4.2.15.Final.jar","manifestName":"","pomArtifactID":"netty-codec-http3","archiveDigests":[{"value":"39c3e24013ecb21832aebb36609de45c5cb111cd","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-codec-http3-4.2.15.Final.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"4.2.16.Final"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-hpcc-26xq-25fv","versionConstraint":"<4.2.16.Final (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"io.netty:netty-codec-http3","version":"4.2.15.Final"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-hpcc-26xq-25fv","fix":{"state":"fixed","versions":["4.2.16.Final"],"available":[{"date":"2026-07-23","kind":"first-observed","version":"4.2.16.Final"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56816","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-56816","date":"2026-11-12","epss":0.00644,"percentile":0.51378}],"risk":0.483,"urls":["https://github.com/netty/netty/security/advisories/GHSA-hpcc-26xq-25fv","https://nvd.nist.gov/vuln/detail/CVE-2026-56816","https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b","https://github.com/netty/netty/releases/tag/netty-4.2.16.Final"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-hpcc-26xq-25fv","description":"Netty: Memory Exhaustion via HTTP/3 Reserved Frame Types"},"relatedVulnerabilities":[{"id":"CVE-2026-56816","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56816","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-56816","date":"2026-11-12","epss":0.00644,"percentile":0.51378}],"urls":["https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b","https://github.com/netty/netty/releases/tag/netty-4.2.16.Final","https://github.com/netty/netty/security/advisories/GHSA-hpcc-26xq-25fv"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56816","description":"Netty is a network application framework for development of protocol servers and clients. Prior to 4.2.16.Final, Netty's `Http3FrameCodec` buffers incoming data for HTTP/3 reserved frame types up to the wire-specified payload length without limits; `decodeFrame` trusts `payLoadLength`, allowing an attacker to open multiple QUIC streams and send reserved frames with very large payload lengths to cause memory exhaustion and denial of service. This issue is fixed in version 4.2.16.Final."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-6732","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6732","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-6732","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6732","cwe":"CWE-843","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6732","date":"2026-11-12","epss":0.00632,"percentile":0.50807}],"risk":0.47400000000000003,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-6732"},"relatedVulnerabilities":[{"id":"CVE-2026-6732","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6732","cwe":"CWE-843","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6732","date":"2026-11-12","epss":0.00632,"percentile":0.50807}],"urls":["https://access.redhat.com/errata/RHSA-2026:11503","https://access.redhat.com/security/cve/CVE-2026-6732","https://bugzilla.redhat.com/show_bug.cgi?id=2461300","https://gitlab.gnome.org/GNOME/libxml2/-/issues/1097","https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/411"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6732","description":"A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6732","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-6732","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6732","cwe":"CWE-843","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6732","date":"2026-11-12","epss":0.00632,"percentile":0.50807}],"risk":0.47400000000000003,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-6732"},"relatedVulnerabilities":[{"id":"CVE-2026-6732","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6732","cwe":"CWE-843","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6732","date":"2026-11-12","epss":0.00632,"percentile":0.50807}],"urls":["https://access.redhat.com/errata/RHSA-2026:11503","https://access.redhat.com/security/cve/CVE-2026-6732","https://bugzilla.redhat.com/show_bug.cgi?id=2461300","https://gitlab.gnome.org/GNOME/libxml2/-/issues/1097","https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/411"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6732","description":"A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6732","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-6732","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6732","cwe":"CWE-843","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6732","date":"2026-11-12","epss":0.00632,"percentile":0.50807}],"risk":0.47400000000000003,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-6732"},"relatedVulnerabilities":[{"id":"CVE-2026-6732","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6732","cwe":"CWE-843","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6732","date":"2026-11-12","epss":0.00632,"percentile":0.50807}],"urls":["https://access.redhat.com/errata/RHSA-2026:11503","https://access.redhat.com/security/cve/CVE-2026-6732","https://bugzilla.redhat.com/show_bug.cgi?id=2461300","https://gitlab.gnome.org/GNOME/libxml2/-/issues/1097","https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/411"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6732","description":"A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6732","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-6732","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6732","cwe":"CWE-843","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6732","date":"2026-11-12","epss":0.00632,"percentile":0.50807}],"risk":0.47400000000000003,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-6732"},"relatedVulnerabilities":[{"id":"CVE-2026-6732","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6732","cwe":"CWE-843","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6732","date":"2026-11-12","epss":0.00632,"percentile":0.50807}],"urls":["https://access.redhat.com/errata/RHSA-2026:11503","https://access.redhat.com/security/cve/CVE-2026-6732","https://bugzilla.redhat.com/show_bug.cgi?id=2461300","https://gitlab.gnome.org/GNOME/libxml2/-/issues/1097","https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/411"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6732","description":"A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6732","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-6732","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6732","cwe":"CWE-843","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6732","date":"2026-11-12","epss":0.00632,"percentile":0.50807}],"risk":0.47400000000000003,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-6732"},"relatedVulnerabilities":[{"id":"CVE-2026-6732","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6732","cwe":"CWE-843","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6732","date":"2026-11-12","epss":0.00632,"percentile":0.50807}],"urls":["https://access.redhat.com/errata/RHSA-2026:11503","https://access.redhat.com/security/cve/CVE-2026-6732","https://bugzilla.redhat.com/show_bug.cgi?id=2461300","https://gitlab.gnome.org/GNOME/libxml2/-/issues/1097","https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/411"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6732","description":"A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6732","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-6732","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6732","cwe":"CWE-843","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6732","date":"2026-11-12","epss":0.00632,"percentile":0.50807}],"risk":0.47400000000000003,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-6732"},"relatedVulnerabilities":[{"id":"CVE-2026-6732","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6732","cwe":"CWE-843","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6732","date":"2026-11-12","epss":0.00632,"percentile":0.50807}],"urls":["https://access.redhat.com/errata/RHSA-2026:11503","https://access.redhat.com/security/cve/CVE-2026-6732","https://bugzilla.redhat.com/show_bug.cgi?id=2461300","https://gitlab.gnome.org/GNOME/libxml2/-/issues/1097","https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/411"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6732","description":"A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-6732","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-6732","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6732","cwe":"CWE-843","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6732","date":"2026-11-12","epss":0.00632,"percentile":0.50807}],"risk":0.47400000000000003,"urls":[],"severity":"High","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-6732"},"relatedVulnerabilities":[{"id":"CVE-2026-6732","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-6732","cwe":"CWE-843","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-6732","date":"2026-11-12","epss":0.00632,"percentile":0.50807}],"urls":["https://access.redhat.com/errata/RHSA-2026:11503","https://access.redhat.com/security/cve/CVE-2026-6732","https://bugzilla.redhat.com/show_bug.cgi?id=2461300","https://gitlab.gnome.org/GNOME/libxml2/-/issues/1097","https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/411"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-6732","description":"A flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable."}]},{"artifact":{"id":"38371f85f698b6df","cpes":["cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.22.0:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.0","type":"java-archive","version":"2.22.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-2.22.0.jar","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":[{"value":"7aa54fc3755a9285eec2e73053bde1b9b845a9b2","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-2.22.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.22.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-q4xh-88c3-wmh7","versionConstraint":">=2.22.0,<2.22.2 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.22.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-q4xh-88c3-wmh7","fix":{"state":"fixed","versions":["2.22.2"],"available":[{"date":"2026-09-29","kind":"first-observed","version":"2.22.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-68497","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-68497","cwe":"CWE-1333","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-68497","date":"2026-11-12","epss":0.00628,"percentile":0.50605}],"risk":0.471,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-q4xh-88c3-wmh7","description":"jackson-databind: Duration XMLGregorianCalendar Unbounded Number Parse DoS"},"relatedVulnerabilities":[{"id":"CVE-2026-68497","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-68497","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-68497","cwe":"CWE-1333","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-68497","date":"2026-11-12","epss":0.00628,"percentile":0.50605}],"urls":["https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-68497","description":"jackson-databind binds a JSON string to a javax.xml.datatype.Duration or javax.xml.datatype.XMLGregorianCalendar field by passing the raw string verbatim to DatatypeFactory.newDuration(value) or newXMLGregorianCalendar(value) in CoreXMLDeserializers.Std._deserialize. These deserializers are registered by default with no opt-in, so a plain ObjectMapper or JsonMapper with no polymorphic typing and no special configuration reaches this path. The XML Schema lexical grammar permits numeric components of arbitrary length, which the JDK materializes through the native BigInteger(String) and BigDecimal(String) constructors, both quadratic in digit count. Because the digits sit inside a JSON string token rather than a JSON number token, jackson-core's StreamReadConstraints.maxNumberLength guard never applies; jackson's own NumberDeserializers call validateIntegerLength or validateFPLength before parsing a stringified number, but the XML datatype deserializer omits that pre-check. An unauthenticated attacker can therefore submit a single request of a few megabytes, such as a Duration value consisting of the letter P followed by several million digits and the letter Y, and force tens of seconds to several minutes of single-threaded CPU work; a handful of concurrent requests can saturate a server's worker threads. This affects com.fasterxml.jackson.core:jackson-databind from 2.0.0 before 2.18.10, from 2.19.0 before 2.21.6, and from 2.22.0 before 2.22.2, and tools.jackson.core:jackson-databind from 3.0.0 before 3.1.6 and from 3.2.0 before 3.2.2. Users should upgrade to 2.18.10, 2.21.6, 2.22.2, 3.1.6, or 3.2.2."}]},{"artifact":{"id":"90a279e83dd2fa78","cpes":["cpe:2.3:a:jackson-databind:jackson-databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:3.2.0:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/tools.jackson.core/jackson-databind@3.2.0","type":"java-archive","version":"3.2.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"tools.jackson.core","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-3.2.0.jar","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":[{"value":"45c1083a04086e6b7a0d008ac6c56655567690d0","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-3.2.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.2.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-q4xh-88c3-wmh7","versionConstraint":">=3.2.0,<3.2.2 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"tools.jackson.core:jackson-databind","version":"3.2.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-q4xh-88c3-wmh7","fix":{"state":"fixed","versions":["3.2.2"],"available":[{"date":"2026-09-29","kind":"first-observed","version":"3.2.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-68497","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-68497","cwe":"CWE-1333","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-68497","date":"2026-11-12","epss":0.00628,"percentile":0.50605}],"risk":0.471,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7","https://nvd.nist.gov/vuln/detail/CVE-2026-68497","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-q4xh-88c3-wmh7","description":"jackson-databind: Duration XMLGregorianCalendar Unbounded Number Parse DoS"},"relatedVulnerabilities":[{"id":"CVE-2026-68497","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-68497","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-68497","cwe":"CWE-1333","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-68497","date":"2026-11-12","epss":0.00628,"percentile":0.50605}],"urls":["https://github.com/FasterXML/jackson-databind/commit/a99b7e74c8928f43f6975773a8c862c8316178bd","https://github.com/FasterXML/jackson-databind/pull/6127","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-q4xh-88c3-wmh7"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-68497","description":"jackson-databind binds a JSON string to a javax.xml.datatype.Duration or javax.xml.datatype.XMLGregorianCalendar field by passing the raw string verbatim to DatatypeFactory.newDuration(value) or newXMLGregorianCalendar(value) in CoreXMLDeserializers.Std._deserialize. These deserializers are registered by default with no opt-in, so a plain ObjectMapper or JsonMapper with no polymorphic typing and no special configuration reaches this path. The XML Schema lexical grammar permits numeric components of arbitrary length, which the JDK materializes through the native BigInteger(String) and BigDecimal(String) constructors, both quadratic in digit count. Because the digits sit inside a JSON string token rather than a JSON number token, jackson-core's StreamReadConstraints.maxNumberLength guard never applies; jackson's own NumberDeserializers call validateIntegerLength or validateFPLength before parsing a stringified number, but the XML datatype deserializer omits that pre-check. An unauthenticated attacker can therefore submit a single request of a few megabytes, such as a Duration value consisting of the letter P followed by several million digits and the letter Y, and force tens of seconds to several minutes of single-threaded CPU work; a handful of concurrent requests can saturate a server's worker threads. This affects com.fasterxml.jackson.core:jackson-databind from 2.0.0 before 2.18.10, from 2.19.0 before 2.21.6, and from 2.22.0 before 2.22.2, and tools.jackson.core:jackson-databind from 3.0.0 before 3.1.6 and from 3.2.0 before 3.2.2. Users should upgrade to 2.18.10, 2.21.6, 2.22.2, 3.1.6, or 3.2.2."}]},{"artifact":{"id":"b170b7ceaf956095","cpes":["cpe:2.3:a:com.fasterxml.jackson.core.jackson-core:jackson-core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-core:jackson_core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-core:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-core:core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson-core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson-core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson_core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson-core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson_core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:core:2.22.0:*:*:*:*:*:*:*"],"name":"jackson-core","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.0","type":"java-archive","version":"2.22.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-core-2.22.0.jar","manifestName":"","pomArtifactID":"jackson-core","archiveDigests":[{"value":"f25b20bdff54546bcaf9d1ac4701447f2d3968f7","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-core-2.22.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.22.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-p6pp-m3f8-5c89","versionConstraint":">=2.22.0,<=2.22.2 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-core","version":"2.22.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-p6pp-m3f8-5c89","fix":{"state":"fixed","versions":["2.22.3"],"available":[{"date":"2026-10-01","kind":"first-observed","version":"2.22.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-89407","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-89407","cwe":"CWE-1333","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-89407","date":"2026-11-12","epss":0.00628,"percentile":0.50598}],"risk":0.471,"urls":["https://github.com/FasterXML/jackson-core/security/advisories/GHSA-p6pp-m3f8-5c89","https://nvd.nist.gov/vuln/detail/CVE-2026-89407","https://github.com/FasterXML/jackson-core/issues/1649","https://github.com/FasterXML/jackson-core/pull/1650","https://github.com/FasterXML/jackson-core/pull/1701","https://github.com/FasterXML/jackson-core/commit/731e794f62623aa0d86ced52490166be903fbb1d","https://github.com/FasterXML/jackson-core/commit/e7acd64cc99bd346704423dc2bfea1ab0a08ddff"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-p6pp-m3f8-5c89","description":"jackson-core: ReDoS: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber()"},"relatedVulnerabilities":[{"id":"CVE-2026-89407","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-89407","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-89407","cwe":"CWE-1333","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-89407","date":"2026-11-12","epss":0.00628,"percentile":0.50598}],"urls":["https://github.com/FasterXML/jackson-core/issues/1649","https://github.com/FasterXML/jackson-core/pull/1650","https://github.com/FasterXML/jackson-core/pull/1701","https://github.com/FasterXML/jackson-core/security/advisories/GHSA-p6pp-m3f8-5c89"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-89407","description":"NumberInput.looksLikeValidNumber() in FasterXML jackson-core pre-validates \"stringified numbers\" with two regular expressions: PATTERN_FLOAT ([+-]?[0-9]*[\\.]?[0-9]+([eE][+-]?[0-9]+)?), present since 2.17.0, and PATTERN_FLOAT_TRAILING_DOT, added in 2.17.2. PATTERN_FLOAT places adjacent quantifiers over the same character class -- an optional [0-9]* run, an optional dot, then a required [0-9]+ run -- so input that ultimately fails to match forces Java's backtracking engine to retry every possible split point of the digit run. \n\n\n\nMatching cost therefore grows with the square of the input length. \n\n\n\nAn attacker who can supply JSON that an application deserializes into a numeric target type reaches this method through jackson-databind's default String-to-number coercion (StdDeserializer and NumberDeserializers for BigDecimal, BigInteger, Double and Float). \n\n\n\nBecause StreamReadConstraints.maxStringLength defaults to 20,000,000 characters, no constraint bounds the input before it reaches the regex. \n\n\n\nTesting by the reporter confirmed O(n^2) growth across five consecutive input-size doublings, with a single 160,000-character string consuming roughly 74 seconds in one call; a small number of concurrent requests of ordinary body size can therefore exhaust a server's request-handling thread pool. \n\n\n\nThe affected method does not exist before 2.17.0, so 2.16.x and earlier releases are not affected. \n\n\n\nThe fix replaces both regular expressions with a hand-rolled single-pass scan."}]},{"artifact":{"id":"7adda8238456c14d","cpes":["cpe:2.3:a:jackson-core:jackson-core:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson_core:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson-core:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson_core:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-core:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_core:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-core:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_core:3.2.0:*:*:*:*:*:*:*"],"name":"jackson-core","purl":"pkg:maven/tools.jackson.core/jackson-core@3.2.0","type":"java-archive","version":"3.2.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"tools.jackson.core","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-core-3.2.0.jar","manifestName":"","pomArtifactID":"jackson-core","archiveDigests":[{"value":"ebf2fc67340907abfc4891ed74ba4c4419e2b47e","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-core-3.2.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.2.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-p6pp-m3f8-5c89","versionConstraint":">=3.2.0,<=3.2.1 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"tools.jackson.core:jackson-core","version":"3.2.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-p6pp-m3f8-5c89","fix":{"state":"fixed","versions":["3.2.2"],"available":[{"date":"2026-10-01","kind":"first-observed","version":"3.2.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-89407","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-89407","cwe":"CWE-1333","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-89407","date":"2026-11-12","epss":0.00628,"percentile":0.50598}],"risk":0.471,"urls":["https://github.com/FasterXML/jackson-core/security/advisories/GHSA-p6pp-m3f8-5c89","https://nvd.nist.gov/vuln/detail/CVE-2026-89407","https://github.com/FasterXML/jackson-core/issues/1649","https://github.com/FasterXML/jackson-core/pull/1650","https://github.com/FasterXML/jackson-core/pull/1701","https://github.com/FasterXML/jackson-core/commit/731e794f62623aa0d86ced52490166be903fbb1d","https://github.com/FasterXML/jackson-core/commit/e7acd64cc99bd346704423dc2bfea1ab0a08ddff"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-p6pp-m3f8-5c89","description":"jackson-core: ReDoS: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber()"},"relatedVulnerabilities":[{"id":"CVE-2026-89407","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-89407","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-89407","cwe":"CWE-1333","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-89407","date":"2026-11-12","epss":0.00628,"percentile":0.50598}],"urls":["https://github.com/FasterXML/jackson-core/issues/1649","https://github.com/FasterXML/jackson-core/pull/1650","https://github.com/FasterXML/jackson-core/pull/1701","https://github.com/FasterXML/jackson-core/security/advisories/GHSA-p6pp-m3f8-5c89"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-89407","description":"NumberInput.looksLikeValidNumber() in FasterXML jackson-core pre-validates \"stringified numbers\" with two regular expressions: PATTERN_FLOAT ([+-]?[0-9]*[\\.]?[0-9]+([eE][+-]?[0-9]+)?), present since 2.17.0, and PATTERN_FLOAT_TRAILING_DOT, added in 2.17.2. PATTERN_FLOAT places adjacent quantifiers over the same character class -- an optional [0-9]* run, an optional dot, then a required [0-9]+ run -- so input that ultimately fails to match forces Java's backtracking engine to retry every possible split point of the digit run. \n\n\n\nMatching cost therefore grows with the square of the input length. \n\n\n\nAn attacker who can supply JSON that an application deserializes into a numeric target type reaches this method through jackson-databind's default String-to-number coercion (StdDeserializer and NumberDeserializers for BigDecimal, BigInteger, Double and Float). \n\n\n\nBecause StreamReadConstraints.maxStringLength defaults to 20,000,000 characters, no constraint bounds the input before it reaches the regex. \n\n\n\nTesting by the reporter confirmed O(n^2) growth across five consecutive input-size doublings, with a single 160,000-character string consuming roughly 74 seconds in one call; a small number of concurrent requests of ordinary body size can therefore exhaust a server's request-handling thread pool. \n\n\n\nThe affected method does not exist before 2.17.0, so 2.16.x and earlier releases are not affected. \n\n\n\nThe fix replaces both regular expressions with a hand-rolled single-pass scan."}]},{"artifact":{"id":"8de79d211419e1a7","cpes":["cpe:2.3:a:apache:shiro-core:1.13.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:shiro_core:1.13.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:shiro:1.13.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:core:1.13.0:*:*:*:*:*:*:*"],"name":"shiro-core","purl":"pkg:maven/org.apache.shiro/shiro-core@1.13.0","type":"java-archive","version":"1.13.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.apache.shiro","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/shiro-core-1.13.0.jar","manifestName":"","pomArtifactID":"shiro-core","archiveDigests":[{"value":"7e542e3d614b197bf10005e98e19f9f19cb943e7","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/shiro-core-1.13.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.2.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-x96m-rh44-vgv8","versionConstraint":"<2.2.1 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.shiro:shiro-core","version":"1.13.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-x96m-rh44-vgv8","fix":{"state":"fixed","versions":["2.2.1"],"available":[{"date":"2026-06-19","kind":"first-observed","version":"2.2.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/S:P/AU:Y/R:A/RE:L/U:Red","metrics":{"baseScore":8.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-49268","cwe":"CWE-90","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-49268","date":"2026-11-12","epss":0.00512,"percentile":0.44159}],"risk":0.4172800000000001,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-49268","https://lists.apache.org/thread/svszql3od8td7hn6conyj2oq70v53b5s","http://www.openwall.com/lists/oss-security/2026/06/17/8"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-x96m-rh44-vgv8","description":"Apache Shiro: LDAP DN Injection in DefaultLdapRealm"},"relatedVulnerabilities":[{"id":"CVE-2026-49268","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@apache.org","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:A/V:X/RE:L/U:Red","metrics":{"baseScore":8.8},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-49268","cwe":"CWE-90","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-49268","date":"2026-11-12","epss":0.00512,"percentile":0.44159}],"urls":["https://lists.apache.org/thread/svszql3od8td7hn6conyj2oq70v53b5s","http://www.openwall.com/lists/oss-security/2026/06/17/8"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-49268","description":"A remote attacker can inject LDAP special characters into the Distinguished Name (DN) construction in DefaultLdapRealm class. User-supplied username input is directly concatenated into the LDAP DN template without any escaping of RFC 2253 special characters. This allows an attacker to manipulate the DN structure used for LDAP bind authentication, potentially bypassing authentication or impersonating other users.\n\nThis issue affects all Apache Shiro versions through 2.2.0, and 3.0.0-alpha-1 when using DefaultLdapRealm\nUpgrade to Apache Shiro 2.2.1 or 3.0.0-alpha-2 or later, which fixes the issue."}]},{"artifact":{"id":"0174286adf7ace24","cpes":["cpe:2.3:a:jonathan-hedley:jsoup:1.15.3:*:*:*:*:*:*:*","cpe:2.3:a:jonathan_hedley:jsoup:1.15.3:*:*:*:*:*:*:*","cpe:2.3:a:org.jsoup:jsoup:1.15.3:*:*:*:*:*:*:*","cpe:2.3:a:jsoup:jsoup:1.15.3:*:*:*:*:*:*:*"],"name":"jsoup","purl":"pkg:maven/org.jsoup/jsoup@1.15.3","type":"java-archive","version":"1.15.3","language":"java","licenses":["https://jsoup.org/license"],"metadata":{"pomGroupID":"org.jsoup","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jsoup-1.15.3.jar","manifestName":"","pomArtifactID":"jsoup","archiveDigests":[{"value":"f6e1d8a8819f854b681c8eaa57fd59a42329e10c","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jsoup-1.15.3.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.23.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-65r4-943x-97jj","versionConstraint":"<1.23.2 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jsoup:jsoup","version":"1.15.3"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-65r4-943x-97jj","fix":{"state":"fixed","versions":["1.23.2"],"available":[{"date":"2026-10-06","kind":"first-observed","version":"1.23.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75140","cwe":"CWE-770","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-75140","date":"2026-11-12","epss":0.00525,"percentile":0.45022}],"risk":0.40950000000000003,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-75140","https://github.com/jhy/jsoup/pull/2556","https://github.com/jhy/jsoup/commit/862ba2f1d48ee95609183dbcfc848c9fd7afc76a","https://www.vulncheck.com/advisories/jsoup-uncontrolled-resource-consumption-in-xmltreebuilder","https://github.com/jhy/jsoup/releases/tag/jsoup-1.23.2"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-65r4-943x-97jj","description":"jsoup XmlTreeBuilder vulnerable to memory exhaustion through deeply nested namespace declarations"},"relatedVulnerabilities":[{"id":"CVE-2026-75140","cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75140","cwe":"CWE-770","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-75140","date":"2026-11-12","epss":0.00525,"percentile":0.45022}],"urls":["https://github.com/jhy/jsoup/commit/862ba2f1d48ee95609183dbcfc848c9fd7afc76a","https://github.com/jhy/jsoup/pull/2556","https://www.vulncheck.com/advisories/jsoup-uncontrolled-resource-consumption-in-xmltreebuilder"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75140","description":"jsoup through 1.23.2, fixed in commit 862ba2f, contains an uncontrolled resource consumption vulnerability in XmlTreeBuilder that allows remote attackers to exhaust JVM heap memory by supplying a deeply nested XML document with uniquely-namespaced elements. The builder copies the entire inherited namespace map on every start element, causing quadratic time and memory complexity, which attackers can exploit to trigger an OutOfMemoryError and terminate the application."}]},{"artifact":{"id":"b170b7ceaf956095","cpes":["cpe:2.3:a:com.fasterxml.jackson.core.jackson-core:jackson-core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-core:jackson_core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-core:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-core:core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson-core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson-core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson_core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson-core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson_core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:core:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:core:2.22.0:*:*:*:*:*:*:*"],"name":"jackson-core","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-core@2.22.0","type":"java-archive","version":"2.22.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-core-2.22.0.jar","manifestName":"","pomArtifactID":"jackson-core","archiveDigests":[{"value":"f25b20bdff54546bcaf9d1ac4701447f2d3968f7","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-core-2.22.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.22.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-7hhh-6rmp-j9qf","versionConstraint":">=2.22.0,<=2.22.2 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-core","version":"2.22.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-7hhh-6rmp-j9qf","fix":{"state":"fixed","versions":["2.22.3"],"available":[{"date":"2026-10-01","kind":"first-observed","version":"2.22.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-89425","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-89425","cwe":"CWE-770","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-89425","date":"2026-11-12","epss":0.00532,"percentile":0.45471}],"risk":0.399,"urls":["https://github.com/FasterXML/jackson-core/security/advisories/GHSA-7hhh-6rmp-j9qf","https://nvd.nist.gov/vuln/detail/CVE-2026-89425","https://github.com/FasterXML/jackson-core/pull/1698","https://github.com/FasterXML/jackson-core/commit/211cf2c5d91abbec38067f37efc1363cd4e88ee3","https://github.com/FasterXML/jackson-core/releases/tag/jackson-core-2.18.11","https://github.com/FasterXML/jackson-core/releases/tag/jackson-core-3.2.3"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-7hhh-6rmp-j9qf","description":"jackson-core: UTF8DataInputJsonParser._reportInvalidToken() missing maxErrorTokenLength limit -> unbounded StringBuilder growth (DoS)"},"relatedVulnerabilities":[{"id":"CVE-2026-89425","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-89425","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-89425","cwe":"CWE-770","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-89425","date":"2026-11-12","epss":0.00532,"percentile":0.45471}],"urls":["https://github.com/FasterXML/jackson-core/pull/1698","https://github.com/FasterXML/jackson-core/security/advisories/GHSA-7hhh-6rmp-j9qf"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-89425","description":"UTF8DataInputJsonParser._reportInvalidToken() in FasterXML jackson-core builds the offending-token text for its error message by appending Java identifier characters to a StringBuilder in a loop that has no upper bound. Unlike the three sibling parser implementations, including UTF8StreamJsonParser, it never consults ErrorReportConfiguration.getMaxErrorTokenLength() (default 256). A malformed token supplied to a parser created through JsonFactory.createParser(DataInput) is therefore accumulated in full. No StreamReadConstraints setting mitigates this: maxDocumentLength cannot be applied to DataInput sources at all, and maxStringLength does not cover this path because the accumulation bypasses ReadConstrainedTextBuffer. The reporter measured a 20,000,109-character exception message from a 20-million-character malformed token on the DataInput path, against 367 characters for identical input on the InputStream path. Scaling the payload drives the StringBuilder, which also incurs byte-to-char expansion and internal array doubling, to many times the raw payload size and can trigger OutOfMemoryError for the whole JVM. UTF8DataInputJsonParser was introduced in 2.8.0 together with createParser(DataInput); releases before 2.8.0 do not contain the affected class."}]},{"artifact":{"id":"7adda8238456c14d","cpes":["cpe:2.3:a:jackson-core:jackson-core:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-core:jackson_core:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson-core:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_core:jackson_core:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-core:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_core:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-core:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_core:3.2.0:*:*:*:*:*:*:*"],"name":"jackson-core","purl":"pkg:maven/tools.jackson.core/jackson-core@3.2.0","type":"java-archive","version":"3.2.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"tools.jackson.core","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-core-3.2.0.jar","manifestName":"","pomArtifactID":"jackson-core","archiveDigests":[{"value":"ebf2fc67340907abfc4891ed74ba4c4419e2b47e","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-core-3.2.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.2.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-7hhh-6rmp-j9qf","versionConstraint":">=3.2.0,<=3.2.2 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"tools.jackson.core:jackson-core","version":"3.2.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-7hhh-6rmp-j9qf","fix":{"state":"fixed","versions":["3.2.3"],"available":[{"date":"2026-10-01","kind":"first-observed","version":"3.2.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-89425","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-89425","cwe":"CWE-770","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-89425","date":"2026-11-12","epss":0.00532,"percentile":0.45471}],"risk":0.399,"urls":["https://github.com/FasterXML/jackson-core/security/advisories/GHSA-7hhh-6rmp-j9qf","https://nvd.nist.gov/vuln/detail/CVE-2026-89425","https://github.com/FasterXML/jackson-core/pull/1698","https://github.com/FasterXML/jackson-core/commit/211cf2c5d91abbec38067f37efc1363cd4e88ee3","https://github.com/FasterXML/jackson-core/releases/tag/jackson-core-2.18.11","https://github.com/FasterXML/jackson-core/releases/tag/jackson-core-3.2.3"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-7hhh-6rmp-j9qf","description":"jackson-core: UTF8DataInputJsonParser._reportInvalidToken() missing maxErrorTokenLength limit -> unbounded StringBuilder growth (DoS)"},"relatedVulnerabilities":[{"id":"CVE-2026-89425","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-89425","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-89425","cwe":"CWE-770","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-89425","date":"2026-11-12","epss":0.00532,"percentile":0.45471}],"urls":["https://github.com/FasterXML/jackson-core/pull/1698","https://github.com/FasterXML/jackson-core/security/advisories/GHSA-7hhh-6rmp-j9qf"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-89425","description":"UTF8DataInputJsonParser._reportInvalidToken() in FasterXML jackson-core builds the offending-token text for its error message by appending Java identifier characters to a StringBuilder in a loop that has no upper bound. Unlike the three sibling parser implementations, including UTF8StreamJsonParser, it never consults ErrorReportConfiguration.getMaxErrorTokenLength() (default 256). A malformed token supplied to a parser created through JsonFactory.createParser(DataInput) is therefore accumulated in full. No StreamReadConstraints setting mitigates this: maxDocumentLength cannot be applied to DataInput sources at all, and maxStringLength does not cover this path because the accumulation bypasses ReadConstrainedTextBuffer. The reporter measured a 20,000,109-character exception message from a 20-million-character malformed token on the DataInput path, against 367 characters for identical input on the InputStream path. Scaling the payload drives the StringBuilder, which also incurs byte-to-char expansion and internal array doubling, to many times the raw payload size and can trigger OutOfMemoryError for the whole JVM. UTF8DataInputJsonParser was introduced in 2.8.0 together with createParser(DataInput); releases before 2.8.0 do not contain the affected class."}]},{"artifact":{"id":"1bde8882c61f013d","cpes":["cpe:2.3:a:bouncycastle-org:bc-fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle-org:bc_fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bc-fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bc_fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bc-fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bc_fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bc-fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bc_fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bc-fips:bc-fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bc-fips:bc_fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bc_fips:bc-fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bc_fips:bc_fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bc:bc-fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bc:bc_fips:2.1.2:*:*:*:*:*:*:*"],"name":"bc-fips","purl":"pkg:maven/org.bouncycastle/bc-fips@2.1.2","type":"java-archive","version":"2.1.2","language":"java","licenses":[],"metadata":{"pomGroupID":"org.bouncycastle","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/bc-fips-2.1.2.jar","manifestName":"","pomArtifactID":"bc-fips","archiveDigests":[{"value":"061fbe8383f70489dda95a11a2a4739eb818ff2c","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/bc-fips-2.1.2.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.1.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-9pwp-9qqc-pr26","versionConstraint":">=2.1.0,<2.1.3 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.bouncycastle:bc-fips","version":"2.1.2"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-9pwp-9qqc-pr26","fix":{"state":"fixed","versions":["2.1.3"],"available":[{"date":"2026-09-19","kind":"first-observed","version":"2.1.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/U:Amber","metrics":{"baseScore":9.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8763","cwe":"CWE-295","type":"Secondary","source":"91579145-5d7b-4cc5-b925-a0262ff19630"}],"epss":[{"cve":"CVE-2026-8763","date":"2026-11-12","epss":0.0043,"percentile":0.37702}],"risk":0.3913,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-8763","https://github.com/bcgit/bc-java/commit/2c28b253a44681fbbc562561eab6ad383d2ae558","https://github.com/bcgit/bc-java/wiki/CVE-2026-8763","https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%908763","https://github.com/bcgit/bc-java/releases/tag/r1rv85v2"],"severity":"Critical","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-9pwp-9qqc-pr26","description":"Bouncy Castle: Name Constraints bypass via trailing dot in rfc822Name and URI"},"relatedVulnerabilities":[{"id":"CVE-2026-8763","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"91579145-5d7b-4cc5-b925-a0262ff19630","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber","metrics":{"baseScore":9.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8763","cwe":"CWE-295","type":"Secondary","source":"91579145-5d7b-4cc5-b925-a0262ff19630"}],"epss":[{"cve":"CVE-2026-8763","date":"2026-11-12","epss":0.0043,"percentile":0.37702}],"urls":["https://github.com/bcgit/bc-java/commit/2c28b253a44681fbbc562561eab6ad383d2ae558","https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%908763"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-8763","description":"In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series)."}]},{"artifact":{"id":"783fd979194b03e2","cpes":["cpe:2.3:a:org.bouncycastle:bcprov-jdk18on:1.84:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bcprov_jdk18on:1.84:*:*:*:*:*:*:*","cpe:2.3:a:bcprov-jdk18on:bcprov-jdk18on:1.84:*:*:*:*:*:*:*","cpe:2.3:a:bcprov-jdk18on:bcprov_jdk18on:1.84:*:*:*:*:*:*:*","cpe:2.3:a:bcprov_jdk18on:bcprov-jdk18on:1.84:*:*:*:*:*:*:*","cpe:2.3:a:bcprov_jdk18on:bcprov_jdk18on:1.84:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bcprov-jdk18on:1.84:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bcprov_jdk18on:1.84:*:*:*:*:*:*:*","cpe:2.3:a:bcprov:bcprov-jdk18on:1.84:*:*:*:*:*:*:*","cpe:2.3:a:bcprov:bcprov_jdk18on:1.84:*:*:*:*:*:*:*"],"name":"bcprov-jdk18on","purl":"pkg:maven/org.bouncycastle/bcprov-jdk18on@1.84","type":"java-archive","version":"1.84","language":"java","licenses":[],"metadata":{"pomGroupID":"org.bouncycastle","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/bcprov-jdk18on-1.84.jar","manifestName":"","pomArtifactID":"bcprov-jdk18on","archiveDigests":[{"value":"2d5651789941d2f8ae9b8771f23356de6b61e96b","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/bcprov-jdk18on-1.84.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.85"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-9pwp-9qqc-pr26","versionConstraint":"<1.85 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.bouncycastle:bcprov-jdk18on","version":"1.84"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-9pwp-9qqc-pr26","fix":{"state":"fixed","versions":["1.85"],"available":[{"date":"2026-09-19","kind":"first-observed","version":"1.85"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/U:Amber","metrics":{"baseScore":9.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8763","cwe":"CWE-295","type":"Secondary","source":"91579145-5d7b-4cc5-b925-a0262ff19630"}],"epss":[{"cve":"CVE-2026-8763","date":"2026-11-12","epss":0.0043,"percentile":0.37702}],"risk":0.3913,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-8763","https://github.com/bcgit/bc-java/commit/2c28b253a44681fbbc562561eab6ad383d2ae558","https://github.com/bcgit/bc-java/wiki/CVE-2026-8763","https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%908763","https://github.com/bcgit/bc-java/releases/tag/r1rv85v2"],"severity":"Critical","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-9pwp-9qqc-pr26","description":"Bouncy Castle: Name Constraints bypass via trailing dot in rfc822Name and URI"},"relatedVulnerabilities":[{"id":"CVE-2026-8763","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"91579145-5d7b-4cc5-b925-a0262ff19630","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber","metrics":{"baseScore":9.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8763","cwe":"CWE-295","type":"Secondary","source":"91579145-5d7b-4cc5-b925-a0262ff19630"}],"epss":[{"cve":"CVE-2026-8763","date":"2026-11-12","epss":0.0043,"percentile":0.37702}],"urls":["https://github.com/bcgit/bc-java/commit/2c28b253a44681fbbc562561eab6ad383d2ae558","https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%908763"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-8763","description":"In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series)."}]},{"artifact":{"id":"1bde8882c61f013d","cpes":["cpe:2.3:a:bouncycastle-org:bc-fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle-org:bc_fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bc-fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bc_fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bc-fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bc_fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bc-fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bc_fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bc-fips:bc-fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bc-fips:bc_fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bc_fips:bc-fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bc_fips:bc_fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bc:bc-fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bc:bc_fips:2.1.2:*:*:*:*:*:*:*"],"name":"bc-fips","purl":"pkg:maven/org.bouncycastle/bc-fips@2.1.2","type":"java-archive","version":"2.1.2","language":"java","licenses":[],"metadata":{"pomGroupID":"org.bouncycastle","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/bc-fips-2.1.2.jar","manifestName":"","pomArtifactID":"bc-fips","archiveDigests":[{"value":"061fbe8383f70489dda95a11a2a4739eb818ff2c","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/bc-fips-2.1.2.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.1.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-qp49-qgx5-5m26","versionConstraint":">=2.1.0,<2.1.3 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.bouncycastle:bc-fips","version":"2.1.2"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-qp49-qgx5-5m26","fix":{"state":"fixed","versions":["2.1.3"],"available":[{"date":"2026-09-19","kind":"first-observed","version":"2.1.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/U:Amber","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-13506","cwe":"CWE-674","type":"Secondary","source":"91579145-5d7b-4cc5-b925-a0262ff19630"}],"epss":[{"cve":"CVE-2026-13506","date":"2026-11-12","epss":0.00493,"percentile":0.42868}],"risk":0.38454000000000005,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-13506","https://github.com/bcgit/bc-java/commit/77454da9b3dcaaa2991412d1c3c1a6e1a338ff84","https://github.com/bcgit/bc-java/wiki/CVE-2026-13506"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-qp49-qgx5-5m26","description":"Bouncy Castle: Lazy ASN.1 sequence forcing resets nesting-depth guard"},"relatedVulnerabilities":[{"id":"CVE-2026-13506","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"91579145-5d7b-4cc5-b925-a0262ff19630","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-13506","cwe":"CWE-674","type":"Secondary","source":"91579145-5d7b-4cc5-b925-a0262ff19630"}],"epss":[{"cve":"CVE-2026-13506","date":"2026-11-12","epss":0.00493,"percentile":0.42868}],"urls":["https://github.com/bcgit/bc-java/commit/77454da9b3dcaaa2991412d1c3c1a6e1a338ff84","https://github.com/bcgit/bc-java/wiki/CVE-2026-13506"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-13506","description":"In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series)."}]},{"artifact":{"id":"783fd979194b03e2","cpes":["cpe:2.3:a:org.bouncycastle:bcprov-jdk18on:1.84:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bcprov_jdk18on:1.84:*:*:*:*:*:*:*","cpe:2.3:a:bcprov-jdk18on:bcprov-jdk18on:1.84:*:*:*:*:*:*:*","cpe:2.3:a:bcprov-jdk18on:bcprov_jdk18on:1.84:*:*:*:*:*:*:*","cpe:2.3:a:bcprov_jdk18on:bcprov-jdk18on:1.84:*:*:*:*:*:*:*","cpe:2.3:a:bcprov_jdk18on:bcprov_jdk18on:1.84:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bcprov-jdk18on:1.84:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bcprov_jdk18on:1.84:*:*:*:*:*:*:*","cpe:2.3:a:bcprov:bcprov-jdk18on:1.84:*:*:*:*:*:*:*","cpe:2.3:a:bcprov:bcprov_jdk18on:1.84:*:*:*:*:*:*:*"],"name":"bcprov-jdk18on","purl":"pkg:maven/org.bouncycastle/bcprov-jdk18on@1.84","type":"java-archive","version":"1.84","language":"java","licenses":[],"metadata":{"pomGroupID":"org.bouncycastle","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/bcprov-jdk18on-1.84.jar","manifestName":"","pomArtifactID":"bcprov-jdk18on","archiveDigests":[{"value":"2d5651789941d2f8ae9b8771f23356de6b61e96b","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/bcprov-jdk18on-1.84.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.85"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-qp49-qgx5-5m26","versionConstraint":"<1.85 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.bouncycastle:bcprov-jdk18on","version":"1.84"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-qp49-qgx5-5m26","fix":{"state":"fixed","versions":["1.85"],"available":[{"date":"2026-09-19","kind":"first-observed","version":"1.85"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/U:Amber","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-13506","cwe":"CWE-674","type":"Secondary","source":"91579145-5d7b-4cc5-b925-a0262ff19630"}],"epss":[{"cve":"CVE-2026-13506","date":"2026-11-12","epss":0.00493,"percentile":0.42868}],"risk":0.38454000000000005,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-13506","https://github.com/bcgit/bc-java/commit/77454da9b3dcaaa2991412d1c3c1a6e1a338ff84","https://github.com/bcgit/bc-java/wiki/CVE-2026-13506"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-qp49-qgx5-5m26","description":"Bouncy Castle: Lazy ASN.1 sequence forcing resets nesting-depth guard"},"relatedVulnerabilities":[{"id":"CVE-2026-13506","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"91579145-5d7b-4cc5-b925-a0262ff19630","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-13506","cwe":"CWE-674","type":"Secondary","source":"91579145-5d7b-4cc5-b925-a0262ff19630"}],"epss":[{"cve":"CVE-2026-13506","date":"2026-11-12","epss":0.00493,"percentile":0.42868}],"urls":["https://github.com/bcgit/bc-java/commit/77454da9b3dcaaa2991412d1c3c1a6e1a338ff84","https://github.com/bcgit/bc-java/wiki/CVE-2026-13506"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-13506","description":"In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series)."}]},{"artifact":{"id":"38371f85f698b6df","cpes":["cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.22.0:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.0","type":"java-archive","version":"2.22.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-2.22.0.jar","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":[{"value":"7aa54fc3755a9285eec2e73053bde1b9b845a9b2","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-2.22.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.22.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-gx83-3vf8-gh7j","versionConstraint":">=2.22.0,<2.22.2 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.22.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-gx83-3vf8-gh7j","fix":{"state":"fixed","versions":["2.22.2"],"available":[{"date":"2026-09-29","kind":"first-observed","version":"2.22.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.6,"impactScore":3.4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83557","cwe":"CWE-502","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-83557","cwe":"CWE-915","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-83557","date":"2026-11-12","epss":0.00717,"percentile":0.54299}],"risk":0.38001,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-gx83-3vf8-gh7j","description":"jackson-databind: Comparable missing from DefaultBaseTypeLimitingValidator's unsafe base types (incomplete PolymorphicTypeValidator denylist)"},"relatedVulnerabilities":[{"id":"CVE-2026-83557","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.6,"impactScore":3.4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83557","cwe":"CWE-502","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-83557","cwe":"CWE-915","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-83557","date":"2026-11-12","epss":0.00717,"percentile":0.54299}],"urls":["https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83557","description":"DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator. It denies polymorphic resolution only for a fixed set of \"unsafe base types\", and its isSafeSubType method returns true unconditionally for every base type outside that set. java.lang.Comparable was absent from the list despite being implemented by a very large fraction of JDK and application classes, comparable in breadth to java.io.Serializable, which is on the list for that reason. An application declaring an @JsonTypeInfo-annotated property or class with Comparable as its base type, and no custom PolymorphicTypeValidator, will accept a type identifier for essentially any class implementing Comparable. This yields an attacker-controlled object instantiation primitive; a demonstrated case constructs a java.io.File for an arbitrary attacker-chosen path, which becomes path-traversal-adjacent if the application subsequently calls path-sensitive methods on the value. No class implementing Comparable has been identified that yields code execution through deserialization alone. Global Default Typing via activateDefaultTyping is not affected, because that method structurally requires an explicit PolymorphicTypeValidator argument. This affects com.fasterxml.jackson.core:jackson-databind from 2.11.0 before 2.18.10, from 2.19.0 before 2.21.6, and from 2.22.0 before 2.22.2, and tools.jackson.core:jackson-databind from 3.0.0 before 3.1.6 and from 3.2.0 before 3.2.2. Users should upgrade to 2.18.10, 2.21.6, 2.22.2, 3.1.6, or 3.2.2."}]},{"artifact":{"id":"90a279e83dd2fa78","cpes":["cpe:2.3:a:jackson-databind:jackson-databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:3.2.0:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/tools.jackson.core/jackson-databind@3.2.0","type":"java-archive","version":"3.2.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"tools.jackson.core","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-3.2.0.jar","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":[{"value":"45c1083a04086e6b7a0d008ac6c56655567690d0","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-3.2.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.2.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-gx83-3vf8-gh7j","versionConstraint":">=3.2.0,<3.2.2 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"tools.jackson.core:jackson-databind","version":"3.2.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-gx83-3vf8-gh7j","fix":{"state":"fixed","versions":["3.2.2"],"available":[{"date":"2026-09-29","kind":"first-observed","version":"3.2.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.6,"impactScore":3.4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83557","cwe":"CWE-502","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-83557","cwe":"CWE-915","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-83557","date":"2026-11-12","epss":0.00717,"percentile":0.54299}],"risk":0.38001,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j","https://nvd.nist.gov/vuln/detail/CVE-2026-83557","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-gx83-3vf8-gh7j","description":"jackson-databind: Comparable missing from DefaultBaseTypeLimitingValidator's unsafe base types (incomplete PolymorphicTypeValidator denylist)"},"relatedVulnerabilities":[{"id":"CVE-2026-83557","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.6,"impactScore":3.4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83557","cwe":"CWE-502","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-83557","cwe":"CWE-915","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-83557","date":"2026-11-12","epss":0.00717,"percentile":0.54299}],"urls":["https://github.com/FasterXML/jackson-databind/commit/eb3b7fc0f9c0d27f471550ac3316b17d1987388f","https://github.com/FasterXML/jackson-databind/issues/6156","https://github.com/FasterXML/jackson-databind/pull/6155","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-gx83-3vf8-gh7j"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83557","description":"DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator. It denies polymorphic resolution only for a fixed set of \"unsafe base types\", and its isSafeSubType method returns true unconditionally for every base type outside that set. java.lang.Comparable was absent from the list despite being implemented by a very large fraction of JDK and application classes, comparable in breadth to java.io.Serializable, which is on the list for that reason. An application declaring an @JsonTypeInfo-annotated property or class with Comparable as its base type, and no custom PolymorphicTypeValidator, will accept a type identifier for essentially any class implementing Comparable. This yields an attacker-controlled object instantiation primitive; a demonstrated case constructs a java.io.File for an arbitrary attacker-chosen path, which becomes path-traversal-adjacent if the application subsequently calls path-sensitive methods on the value. No class implementing Comparable has been identified that yields code execution through deserialization alone. Global Default Typing via activateDefaultTyping is not affected, because that method structurally requires an explicit PolymorphicTypeValidator argument. This affects com.fasterxml.jackson.core:jackson-databind from 2.11.0 before 2.18.10, from 2.19.0 before 2.21.6, and from 2.22.0 before 2.22.2, and tools.jackson.core:jackson-databind from 3.0.0 before 3.1.6 and from 3.2.0 before 3.2.2. Users should upgrade to 2.18.10, 2.21.6, 2.22.2, 3.1.6, or 3.2.2."}]},{"artifact":{"id":"bc7d0c12b9f24bd1","cpes":["cpe:2.3:a:io.netty.codec-compression:netty-codec-compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-compression:netty_codec_compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-compression:netty-codec-compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-compression:netty_codec_compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_compression:netty-codec-compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_compression:netty_codec_compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-compression:codec-compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-compression:codec_compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-compression:netty-codec-compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-compression:netty_codec_compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_compression:netty-codec-compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_compression:netty_codec_compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-compression:codec-compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-compression:codec_compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_compression:codec-compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_compression:codec_compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty-codec-compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty_codec_compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty-codec-compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty_codec_compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-compression:codec-compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-compression:codec_compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_compression:codec-compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_compression:codec_compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:netty-codec-compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:netty_codec_compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:netty-codec-compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:netty_codec_compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty-codec-compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty_codec_compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:codec-compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:codec_compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:codec-compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:codec_compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:netty-codec-compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:netty_codec_compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:codec-compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:codec_compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty-codec-compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty_codec_compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:codec-compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:codec_compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:codec-compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:codec_compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:codec-compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:codec_compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:codec-compression:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:codec_compression:4.2.15.Final:*:*:*:*:*:*:*"],"name":"netty-codec-compression","purl":"pkg:maven/io.netty/netty-codec-compression@4.2.15.Final","type":"java-archive","version":"4.2.15.Final","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0"],"metadata":{"pomGroupID":"io.netty","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-codec-compression-4.2.15.Final.jar","manifestName":"","pomArtifactID":"netty-codec-compression","archiveDigests":[{"value":"89fc4a20b7ae6af974304b1695405e62c4f9b16d","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-codec-compression-4.2.15.Final.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"4.2.16.Final"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-558v-64gr-wgg4","versionConstraint":">=4.2.0.Final,<4.2.16.Final (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"io.netty:netty-codec-compression","version":"4.2.15.Final"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-558v-64gr-wgg4","fix":{"state":"fixed","versions":["4.2.16.Final"],"available":[{"date":"2026-07-23","kind":"first-observed","version":"4.2.16.Final"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59901","cwe":"CWE-835","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59901","date":"2026-11-12","epss":0.0046,"percentile":0.4036}],"risk":0.3726,"urls":["https://github.com/netty/netty/security/advisories/GHSA-558v-64gr-wgg4","https://github.com/netty/netty/releases/tag/netty-4.1.136.Final","https://github.com/netty/netty/releases/tag/netty-4.2.16.Final"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-558v-64gr-wgg4","description":"Netty: [Bzip2Decoder] Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hang"},"relatedVulnerabilities":[{"id":"CVE-2026-59901","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59901","cwe":"CWE-835","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59901","date":"2026-11-12","epss":0.0046,"percentile":0.4036}],"urls":["https://github.com/netty/netty/security/advisories/GHSA-558v-64gr-wgg4"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59901","description":"Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the `Bzip2Decoder` handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that permanently captures the event-loop thread in an infinite loop. The vulnerability exists in the run-length encoding (RLE) state machine within [`Bzip2BlockDecompressor.read()`]. This issue has been fixed in versions 4.1.136.Final and 4.2.16.Final."}]},{"artifact":{"id":"38371f85f698b6df","cpes":["cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.22.0:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.0","type":"java-archive","version":"2.22.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-2.22.0.jar","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":[{"value":"7aa54fc3755a9285eec2e73053bde1b9b845a9b2","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-2.22.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.22.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-cxp5-3px4-pw24","versionConstraint":">=2.22.0,<=2.22.2 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.22.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-cxp5-3px4-pw24","fix":{"state":"fixed","versions":["2.22.3"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"2.22.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91777","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-91777","date":"2026-11-12","epss":0.00487,"percentile":0.42429}],"risk":0.36525,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind/pull/6204","https://github.com/FasterXML/jackson-databind/commit/37ad9b81712cbb9fb62c2d2c1813593252a24b67","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-cxp5-3px4-pw24","description":"jackson-databind quadratic forward-reference completion"},"relatedVulnerabilities":[{"id":"CVE-2026-91777","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91777","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-91777","date":"2026-11-12","epss":0.00487,"percentile":0.42429}],"urls":["https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91777","description":"Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. The affected paths are CollectionDeserializer.CollectionReferringAccumulator.resolveForwardReference() and the equivalent implementation in MapDeserializer. When a document first creates N unresolved object-ID references in an identity-enabled collection or map and then defines those same IDs in reverse order, completion performs on the order of N * (N + 1) / 2 identity comparisons, so a shallow document whose size grows linearly causes quadratic CPU work during deserialization. The reporter instrumented equals() calls on the ID class and measured exactly 2,003,000 comparisons at N = 2,000, against zero comparisons in the pending-reference lookup path for an equally sized control in which every reference was already resolved. The input requires no deep nesting and no syntactically unusual JSON. Exploitation requires an application that deserializes attacker-influenced JSON into an identity-enabled collection or map. The fix replaces the repeated linear lookup with a keyed pending-reference structure."}]},{"artifact":{"id":"38371f85f698b6df","cpes":["cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.22.0:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.0","type":"java-archive","version":"2.22.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-2.22.0.jar","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":[{"value":"7aa54fc3755a9285eec2e73053bde1b9b845a9b2","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-2.22.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.22.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-wv8q-qhhj-9h54","versionConstraint":">=2.22.0,<=2.22.2 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.22.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-wv8q-qhhj-9h54","fix":{"state":"fixed","versions":["2.22.3"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"2.22.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91776","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-91776","date":"2026-11-12","epss":0.00487,"percentile":0.42429}],"risk":0.36525,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind/commit/2870d1d6dc1b7e1c07ee11dd5b04ab71cddbb577","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-wv8q-qhhj-9h54","description":"jackson-databind retains every unknown raw type ID"},"relatedVulnerabilities":[{"id":"CVE-2026-91776","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91776","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-91776","date":"2026-11-12","epss":0.00487,"percentile":0.42429}],"urls":["https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91776","description":"TypeDeserializerBase._findDeserializer() in FasterXML jackson-databind caches the resolved deserializer under the raw, attacker-supplied type ID. When name-based polymorphism is configured with a fallback, for example @JsonTypeInfo(use = Id.NAME, defaultImpl = ...), every distinct unrecognized type ID resolves to the same fallback deserializer but is retained as its own key in the _deserializers map. That map has no configurable bound and lives for the lifetime of the type deserializer, so an attacker who can repeatedly supply fresh unknown type IDs causes monotonic memory retention across requests. The reporter observed 10,000 retained entries from 10,000 distinct unknown IDs, against a single entry for a control that repeated one unknown ID the same number of times, isolating attacker-controlled key cardinality from request volume. Exploitation requires an application that enables name-based polymorphism with a defaultImpl or equivalent fallback, accepts attacker-influenced type IDs, and reuses a long-lived ObjectMapper across requests. The fix stops caching fallback resolutions for unrecognized IDs and bounds both the number of cached entries and the length of a cacheable type ID."}]},{"artifact":{"id":"90a279e83dd2fa78","cpes":["cpe:2.3:a:jackson-databind:jackson-databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:3.2.0:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/tools.jackson.core/jackson-databind@3.2.0","type":"java-archive","version":"3.2.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"tools.jackson.core","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-3.2.0.jar","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":[{"value":"45c1083a04086e6b7a0d008ac6c56655567690d0","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-3.2.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.2.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-cxp5-3px4-pw24","versionConstraint":">=3.2.0,<=3.2.2 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"tools.jackson.core:jackson-databind","version":"3.2.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-cxp5-3px4-pw24","fix":{"state":"fixed","versions":["3.2.3"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"3.2.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91777","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-91777","date":"2026-11-12","epss":0.00487,"percentile":0.42429}],"risk":0.36525,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24","https://nvd.nist.gov/vuln/detail/CVE-2026-91777","https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind/pull/6204","https://github.com/FasterXML/jackson-databind/commit/37ad9b81712cbb9fb62c2d2c1813593252a24b67","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-cxp5-3px4-pw24","description":"jackson-databind quadratic forward-reference completion"},"relatedVulnerabilities":[{"id":"CVE-2026-91777","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91777","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-91777","date":"2026-11-12","epss":0.00487,"percentile":0.42429}],"urls":["https://github.com/FasterXML/jackson-databind/issues/6204","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-cxp5-3px4-pw24"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91777","description":"Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. The affected paths are CollectionDeserializer.CollectionReferringAccumulator.resolveForwardReference() and the equivalent implementation in MapDeserializer. When a document first creates N unresolved object-ID references in an identity-enabled collection or map and then defines those same IDs in reverse order, completion performs on the order of N * (N + 1) / 2 identity comparisons, so a shallow document whose size grows linearly causes quadratic CPU work during deserialization. The reporter instrumented equals() calls on the ID class and measured exactly 2,003,000 comparisons at N = 2,000, against zero comparisons in the pending-reference lookup path for an equally sized control in which every reference was already resolved. The input requires no deep nesting and no syntactically unusual JSON. Exploitation requires an application that deserializes attacker-influenced JSON into an identity-enabled collection or map. The fix replaces the repeated linear lookup with a keyed pending-reference structure."}]},{"artifact":{"id":"90a279e83dd2fa78","cpes":["cpe:2.3:a:jackson-databind:jackson-databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:3.2.0:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/tools.jackson.core/jackson-databind@3.2.0","type":"java-archive","version":"3.2.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"tools.jackson.core","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-3.2.0.jar","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":[{"value":"45c1083a04086e6b7a0d008ac6c56655567690d0","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-3.2.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.2.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-wv8q-qhhj-9h54","versionConstraint":">=3.2.0,<=3.2.2 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"tools.jackson.core:jackson-databind","version":"3.2.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-wv8q-qhhj-9h54","fix":{"state":"fixed","versions":["3.2.3"],"available":[{"date":"2026-09-30","kind":"first-observed","version":"3.2.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91776","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-91776","date":"2026-11-12","epss":0.00487,"percentile":0.42429}],"risk":0.36525,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54","https://nvd.nist.gov/vuln/detail/CVE-2026-91776","https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind/commit/2870d1d6dc1b7e1c07ee11dd5b04ab71cddbb577","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.11","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.7","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.3","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.7","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.3"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-wv8q-qhhj-9h54","description":"jackson-databind retains every unknown raw type ID"},"relatedVulnerabilities":[{"id":"CVE-2026-91776","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91776","cwe":"CWE-400","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-91776","date":"2026-11-12","epss":0.00487,"percentile":0.42429}],"urls":["https://github.com/FasterXML/jackson-databind/issues/6203","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wv8q-qhhj-9h54"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91776","description":"TypeDeserializerBase._findDeserializer() in FasterXML jackson-databind caches the resolved deserializer under the raw, attacker-supplied type ID. When name-based polymorphism is configured with a fallback, for example @JsonTypeInfo(use = Id.NAME, defaultImpl = ...), every distinct unrecognized type ID resolves to the same fallback deserializer but is retained as its own key in the _deserializers map. That map has no configurable bound and lives for the lifetime of the type deserializer, so an attacker who can repeatedly supply fresh unknown type IDs causes monotonic memory retention across requests. The reporter observed 10,000 retained entries from 10,000 distinct unknown IDs, against a single entry for a control that repeated one unknown ID the same number of times, isolating attacker-controlled key cardinality from request volume. Exploitation requires an application that enables name-based polymorphism with a defaultImpl or equivalent fallback, accepts attacker-influenced type IDs, and reuses a long-lived ObjectMapper across requests. The fix stops caching fallback resolutions for unrecognized IDs and bounds both the number of cached entries and the length of a cacheable type ID."}]},{"artifact":{"id":"aa07c6d10e1ccaf1","cpes":["cpe:2.3:a:io.netty.codec-http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:codec_http:4.2.15.Final:*:*:*:*:*:*:*"],"name":"netty-codec-http","purl":"pkg:maven/io.netty/netty-codec-http@4.2.15.Final","type":"java-archive","version":"4.2.15.Final","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0"],"metadata":{"pomGroupID":"io.netty","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-codec-http-4.2.15.Final.jar","manifestName":"","pomArtifactID":"netty-codec-http","archiveDigests":[{"value":"e611826aa054371bb9a17f27bdb05755a4cac5f0","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-codec-http-4.2.15.Final.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"4.2.16.Final"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-q4f6-jm68-57ww","versionConstraint":">=4.2.0.Final,<=4.2.15.Final (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"io.netty:netty-codec-http","version":"4.2.15.Final"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-q4f6-jm68-57ww","fix":{"state":"fixed","versions":["4.2.16.Final"],"available":[{"date":"2026-07-23","kind":"first-observed","version":"4.2.16.Final"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59899","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59899","date":"2026-11-12","epss":0.00609,"percentile":0.49681}],"risk":0.362355,"urls":["https://github.com/netty/netty/security/advisories/GHSA-q4f6-jm68-57ww","https://github.com/netty/netty/releases/tag/netty-4.1.136.Final","https://github.com/netty/netty/releases/tag/netty-4.2.16.Final"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-q4f6-jm68-57ww","description":"Netty: [HttpContentEncoder] Unbounded Per-Connection Queue Growth via HTTP/1.1 Pipelining Leads to Denial of Service"},"relatedVulnerabilities":[{"id":"CVE-2026-59899","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59899","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59899","date":"2026-11-12","epss":0.00609,"percentile":0.49681}],"urls":["https://github.com/netty/netty/releases/tag/netty-4.1.136.Final","https://github.com/netty/netty/releases/tag/netty-4.2.16.Final","https://github.com/netty/netty/security/advisories/GHSA-q4f6-jm68-57ww"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59899","description":"Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, `HttpContentEncoder` (the superclass of the production handler `HttpContentCompressor`) maintains a per-channel `ArrayDeque<CharSequence>` named `acceptEncodingQueue` that accumulates attacker-controlled data without any size limit. The queue is filled on the I/O thread for every inbound HTTP request and drained only when the application later writes a non-1xx response. This creates a resource exhaustion vulnerability when an attacker exploits HTTP/1.1 pipelining to flood the connection with requests faster than the application produces responses. This issue has been fixed in versions 4.1.136.Final and 4.2.16.Final."}]},{"artifact":{"id":"1bde8882c61f013d","cpes":["cpe:2.3:a:bouncycastle-org:bc-fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle-org:bc_fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bc-fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bc_fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bc-fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bc_fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bc-fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bc_fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bc-fips:bc-fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bc-fips:bc_fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bc_fips:bc-fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bc_fips:bc_fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bc:bc-fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bc:bc_fips:2.1.2:*:*:*:*:*:*:*"],"name":"bc-fips","purl":"pkg:maven/org.bouncycastle/bc-fips@2.1.2","type":"java-archive","version":"2.1.2","language":"java","licenses":[],"metadata":{"pomGroupID":"org.bouncycastle","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/bc-fips-2.1.2.jar","manifestName":"","pomArtifactID":"bc-fips","archiveDigests":[{"value":"061fbe8383f70489dda95a11a2a4739eb818ff2c","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/bc-fips-2.1.2.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.1.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-v6w3-qrh8-qccc","versionConstraint":">=2.1.0,<2.1.3 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.bouncycastle:bc-fips","version":"2.1.2"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-v6w3-qrh8-qccc","fix":{"state":"fixed","versions":["2.1.3"],"available":[{"date":"2026-09-19","kind":"first-observed","version":"2.1.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/U:Amber","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8798","cwe":"CWE-835","type":"Secondary","source":"91579145-5d7b-4cc5-b925-a0262ff19630"}],"epss":[{"cve":"CVE-2026-8798","date":"2026-11-12","epss":0.00428,"percentile":0.37516}],"risk":0.34668,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-8798","https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%908798"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-v6w3-qrh8-qccc","description":"Bouncy Castle: the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound"},"relatedVulnerabilities":[{"id":"CVE-2026-8798","cvss":[{"type":"Secondary","source":"91579145-5d7b-4cc5-b925-a0262ff19630","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8798","cwe":"CWE-835","type":"Secondary","source":"91579145-5d7b-4cc5-b925-a0262ff19630"}],"epss":[{"cve":"CVE-2026-8798","date":"2026-11-12","epss":0.00428,"percentile":0.37516}],"urls":["https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%908798"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-8798","description":"In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.1.3, the native entropy source used on Intel platforms retried the CPU entropy instructions without any bound. RDSEED and RDRAND report failure through their carry flag, and the JNI seeding routine spun re-issuing the instruction for as long as that flag stayed clear, so a persistent failure of the on-chip entropy source - whether from a hardware fault, from the underlying DRBG being exhausted by contention across many cores, or from a hypervisor that does not provide the instruction - left the calling thread looping indefinitely inside the JNI call, where it could be neither interrupted nor timed out. Any operation drawing from the native entropy source could therefore hang, denying service to the application. The retry loops are now bounded (200 attempts for RDSEED and 20 for RDRAND, twice the baselines given in Intel's Digital Random Number Generator software implementation guide), pausing between attempts and, on exhaustion, clearing any partially written buffer and throwing rather than continuing to spin. The clear is performed by an un-elidable memzero, which uses a volatile pointer and an assembly memory barrier so that a compiler cannot optimise the erase away as a dead store. Bouncy Castle for Java (bcprov) is not affected, as it has no native entropy source; the 1.0.X and 2.0.X FIPS series are not affected."}]},{"artifact":{"id":"1bde8882c61f013d","cpes":["cpe:2.3:a:bouncycastle-org:bc-fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle-org:bc_fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bc-fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle_org:bc_fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bc-fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:org.bouncycastle:bc_fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bc-fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bouncycastle:bc_fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bc-fips:bc-fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bc-fips:bc_fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bc_fips:bc-fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bc_fips:bc_fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bc:bc-fips:2.1.2:*:*:*:*:*:*:*","cpe:2.3:a:bc:bc_fips:2.1.2:*:*:*:*:*:*:*"],"name":"bc-fips","purl":"pkg:maven/org.bouncycastle/bc-fips@2.1.2","type":"java-archive","version":"2.1.2","language":"java","licenses":[],"metadata":{"pomGroupID":"org.bouncycastle","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/bc-fips-2.1.2.jar","manifestName":"","pomArtifactID":"bc-fips","archiveDigests":[{"value":"061fbe8383f70489dda95a11a2a4739eb818ff2c","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/bc-fips-2.1.2.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.1.3"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-98j2-6v39-78w8","versionConstraint":">=2.1.0,<2.1.3 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.bouncycastle:bc-fips","version":"2.1.2"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-98j2-6v39-78w8","fix":{"state":"fixed","versions":["2.1.3"],"available":[{"date":"2026-09-19","kind":"first-observed","version":"2.1.3"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/U:Amber","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-13505","cwe":"CWE-772","type":"Secondary","source":"91579145-5d7b-4cc5-b925-a0262ff19630"}],"epss":[{"cve":"CVE-2026-13505","date":"2026-11-12","epss":0.00428,"percentile":0.3751}],"risk":0.34668,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-13505","https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9013505"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-98j2-6v39-78w8","description":"Bouncy Castle: Zeroisation of sensitive key material on garbage collection relies on finalization."},"relatedVulnerabilities":[{"id":"CVE-2026-13505","cvss":[{"type":"Secondary","source":"91579145-5d7b-4cc5-b925-a0262ff19630","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Amber","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-13505","cwe":"CWE-772","type":"Secondary","source":"91579145-5d7b-4cc5-b925-a0262ff19630"}],"epss":[{"cve":"CVE-2026-13505","date":"2026-11-12","epss":0.00428,"percentile":0.3751}],"urls":["https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902026%E2%80%9013505"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-13505","description":"In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series), sensitive key material held by the AES and DESede engines, the SP 800-90A DRBGs, SymmetricSecretKey and the PBKD and scrypt parameter classes was zeroised on garbage collection by overriding Object.finalize. Finalization runs at an unspecified time and in an unspecified order and is serviced by a single finalizer thread, so where objects carrying a finalizer are allocated faster than that thread retires them the pending-finalization queue grows without bound: disposal falls arbitrarily far behind, which can contribute to an OutOfMemoryError under load, and the key material those objects hold stays resident in the heap for as long as they are queued, defeating the purpose of the zeroisation. The behaviour was not a problem on Java 8 or Java 11; it is later JVMs, on which finalization has been deprecated and progressively de-emphasised, where it becomes one. Disposal of these classes now runs from a java.lang.ref.Cleaner registered in the multi-release jdk1.9 overlay, so on Java 9 and later it no longer depends on the finalizer being scheduled. Bouncy Castle for Java (bcprov) and Bouncy Castle for Java LTS are not affected, as neither implements the finalizer-based zeroisation scheme."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91403","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91403","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91403","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91403","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91403","date":"2026-11-12","epss":0.00375,"percentile":0.31899}],"risk":0.339375,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91403"},"relatedVulnerabilities":[{"id":"CVE-2026-91403","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91403","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91403","date":"2026-11-12","epss":0.00375,"percentile":0.31899}],"urls":["https://www.oracle.com/security-alerts/alert-cve-2026-91403.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91403","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1; Oracle GraalVM for JDK: 17.0.21 and  21.0.13; Oracle GraalVM Enterprise Edition: 21.3.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91403","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91403","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91403","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91403","date":"2026-11-12","epss":0.00375,"percentile":0.31899}],"risk":0.339375,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91403"},"relatedVulnerabilities":[{"id":"CVE-2026-91403","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91403","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91403","date":"2026-11-12","epss":0.00375,"percentile":0.31899}],"urls":["https://www.oracle.com/security-alerts/alert-cve-2026-91403.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91403","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1; Oracle GraalVM for JDK: 17.0.21 and  21.0.13; Oracle GraalVM Enterprise Edition: 21.3.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91403","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91403","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91403","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91403","date":"2026-11-12","epss":0.00375,"percentile":0.31899}],"risk":0.339375,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91403"},"relatedVulnerabilities":[{"id":"CVE-2026-91403","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91403","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91403","date":"2026-11-12","epss":0.00375,"percentile":0.31899}],"urls":["https://www.oracle.com/security-alerts/alert-cve-2026-91403.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91403","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1; Oracle GraalVM for JDK: 17.0.21 and  21.0.13; Oracle GraalVM Enterprise Edition: 21.3.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91403","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91403","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91403","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91403","date":"2026-11-12","epss":0.00375,"percentile":0.31899}],"risk":0.339375,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91403"},"relatedVulnerabilities":[{"id":"CVE-2026-91403","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91403","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91403","date":"2026-11-12","epss":0.00375,"percentile":0.31899}],"urls":["https://www.oracle.com/security-alerts/alert-cve-2026-91403.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91403","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1; Oracle GraalVM for JDK: 17.0.21 and  21.0.13; Oracle GraalVM Enterprise Edition: 21.3.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91403","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91403","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91403","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91403","date":"2026-11-12","epss":0.00375,"percentile":0.31899}],"risk":0.339375,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91403"},"relatedVulnerabilities":[{"id":"CVE-2026-91403","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91403","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91403","date":"2026-11-12","epss":0.00375,"percentile":0.31899}],"urls":["https://www.oracle.com/security-alerts/alert-cve-2026-91403.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91403","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1; Oracle GraalVM for JDK: 17.0.21 and  21.0.13; Oracle GraalVM Enterprise Edition: 21.3.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91403","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91403","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91403","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91403","date":"2026-11-12","epss":0.00375,"percentile":0.31899}],"risk":0.339375,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91403"},"relatedVulnerabilities":[{"id":"CVE-2026-91403","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91403","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91403","date":"2026-11-12","epss":0.00375,"percentile":0.31899}],"urls":["https://www.oracle.com/security-alerts/alert-cve-2026-91403.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91403","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1; Oracle GraalVM for JDK: 17.0.21 and  21.0.13; Oracle GraalVM Enterprise Edition: 21.3.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91403","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91403","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91403","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91403","date":"2026-11-12","epss":0.00375,"percentile":0.31899}],"risk":0.339375,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91403"},"relatedVulnerabilities":[{"id":"CVE-2026-91403","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91403","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91403","date":"2026-11-12","epss":0.00375,"percentile":0.31899}],"urls":["https://www.oracle.com/security-alerts/alert-cve-2026-91403.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91403","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u511, 8u511-perf, 11.0.33, 17.0.21, 21.0.13, 25.0.5, 27.0.1; Oracle GraalVM for JDK: 17.0.21 and  21.0.13; Oracle GraalVM Enterprise Edition: 21.3.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"d031d9a03803405c","cpes":["cpe:2.3:a:apache:log4j-api:2.19.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:log4j_api:2.19.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:log4j:2.19.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:api:2.19.0:*:*:*:*:*:*:*"],"name":"log4j-api","purl":"pkg:maven/org.apache.logging.log4j/log4j-api@2.19.0","type":"java-archive","version":"2.19.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.apache.logging.log4j","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/log4j-api-2.19.0.jar","manifestName":"","pomArtifactID":"log4j-api","archiveDigests":[{"value":"ea1b37f38c327596b216542bc636cfdc0b8036fa","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/log4j-api-2.19.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.25.5"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-qv9r-c865-cp47","versionConstraint":">=2.13.1,<2.25.5 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.logging.log4j:log4j-api","version":"2.19.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-qv9r-c865-cp47","fix":{"state":"fixed","versions":["2.25.5"],"available":[{"date":"2026-08-14","kind":"first-observed","version":"2.25.5"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-49844","cwe":"CWE-116","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-49844","date":"2026-11-12","epss":0.00595,"percentile":0.48944}],"risk":0.33617499999999995,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-49844","https://github.com/apache/logging-log4j2/pull/4163","https://logging.apache.org/cyclonedx/vdr.xml","https://logging.apache.org/log4j/2.x/manual/json-template-layout.html#event-template-resolver-message","https://logging.apache.org/security.html#CVE-2026-49844","https://github.com/apache/logging-log4j2/commit/19edb23e162d6c728a8c2221a240037d389ed300","https://github.com/apache/logging-log4j2/commit/feadf8eb0b4acb6ddfa4c0ab2bbc6d88b8e12d82","https://github.com/apache/logging-log4j2/releases/tag/rel/2.25.5","https://github.com/apache/logging-log4j2/releases/tag/rel/2.26.1"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-qv9r-c865-cp47","description":"Apache Log4j API: Improper encoding of non-finite floating-point values during MapMessage JSON serialization"},"relatedVulnerabilities":[{"id":"CVE-2026-49844","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@apache.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-49844","cwe":"CWE-116","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-49844","date":"2026-11-12","epss":0.00595,"percentile":0.48944}],"urls":["https://github.com/apache/logging-log4j2/pull/4163","https://logging.apache.org/cyclonedx/vdr.xml","https://logging.apache.org/log4j/2.x/manual/json-template-layout.html#event-template-resolver-message","https://logging.apache.org/security.html#CVE-2026-49844"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-49844","description":"Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. This issue affects Apache Log4j API versions 2.13.1 through 2.25.4 and version 2.26.0.\n\nThe fix for CVE-2026-34481 did not cover all code paths: when a MapMessage contains a non-finite IEEE 754 value (NaN, Infinity, or -Infinity), MapMessage.asJson() emits the corresponding bare token. RFC 8259 does not permit these tokens, so a conformant parser rejects the resulting document.\n\nThe defect is reachable only when both of the following conditions hold:\n\n  *  The application uses the  message resolver https://logging.apache.org/log4j/2.x/manual/json-template-layout.html#event-template-resolver-message  of JsonTemplateLayout or any other layout that relies on MapMessage.asJson() or MapMessage.getFormattedMessage(new String[]{\"JSON\"}).\n  *  The application logs a MapMessage that contains an attacker-controlled floating-point value.\n\n\nAn attacker who can supply a non-finite value can cause the affected layout to emit malformed JSON, which may corrupt the enclosing log record or disrupt downstream log ingestion and parsing.\n\nUsers are advised to upgrade to Apache Log4j API 2.25.5 or 2.26.1, both of which emit RFC 8259-compliant JSON for non-finite values."}]},{"artifact":{"id":"c65157e2de1fb8b4","cpes":["cpe:2.3:a:io.netty.codec-dns:netty-codec-dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-dns:netty_codec_dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-dns:netty-codec-dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-dns:netty_codec_dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_dns:netty-codec-dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_dns:netty_codec_dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty-codec-dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty_codec_dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty-codec-dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty_codec_dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-dns:codec-dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-dns:codec_dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:netty-codec-dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:netty_codec_dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:netty-codec-dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:netty_codec_dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-dns:netty-codec-dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-dns:netty_codec_dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_dns:netty-codec-dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_dns:netty_codec_dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-dns:codec-dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-dns:codec_dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_dns:codec-dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_dns:codec_dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty-codec-dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty_codec_dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:codec-dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:codec_dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:codec-dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:codec_dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:netty-codec-dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:netty_codec_dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:codec-dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:codec_dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty-codec-dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty_codec_dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:codec-dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:codec_dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-dns:codec-dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-dns:codec_dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_dns:codec-dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_dns:codec_dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:codec-dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:codec_dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:codec-dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:codec_dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:codec-dns:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:codec_dns:4.2.15.Final:*:*:*:*:*:*:*"],"name":"netty-codec-dns","purl":"pkg:maven/io.netty/netty-codec-dns@4.2.15.Final","type":"java-archive","version":"4.2.15.Final","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0"],"metadata":{"pomGroupID":"io.netty","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-codec-dns-4.2.15.Final.jar","manifestName":"","pomArtifactID":"netty-codec-dns","archiveDigests":[{"value":"3da23523d91eaf8af81d2b9080a61d9b1af0762c","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-codec-dns-4.2.15.Final.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"4.2.16.Final"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-mfg7-5gfp-c4w3","versionConstraint":">=4.2.0.Final,<=4.2.15.Final (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"io.netty:netty-codec-dns","version":"4.2.15.Final"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-mfg7-5gfp-c4w3","fix":{"state":"fixed","versions":["4.2.16.Final"],"available":[{"date":"2026-07-25","kind":"first-observed","version":"4.2.16.Final"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-73508","cwe":"CWE-772","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-73508","date":"2026-11-12","epss":0.0063,"percentile":0.50688}],"risk":0.32445,"urls":["https://github.com/netty/netty/security/advisories/GHSA-mfg7-5gfp-c4w3","https://github.com/netty/netty/pull/17063","https://github.com/netty/netty/pull/17065","https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b","https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6","https://github.com/netty/netty/releases/tag/netty-4.1.136.Final","https://github.com/netty/netty/releases/tag/netty-4.2.16.Final"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-mfg7-5gfp-c4w3","description":"Netty: Memory Leak in DNS Record Decoder via Malformed Domain Names"},"relatedVulnerabilities":[{"id":"CVE-2026-73508","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-73508","cwe":"CWE-772","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-73508","date":"2026-11-12","epss":0.0063,"percentile":0.50688}],"urls":["https://github.com/netty/netty/commit/5b68c61f37aa4a3045cba624cbea239655c9003b","https://github.com/netty/netty/commit/bb2ff68a1fb71cb4b0eb9a9e17b66c52aff680c6","https://github.com/netty/netty/releases/tag/netty-4.1.136.Final","https://github.com/netty/netty/releases/tag/netty-4.2.16.Final","https://github.com/netty/netty/security/advisories/GHSA-mfg7-5gfp-c4w3"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-73508","description":"Netty is an asynchronous, event-driven network application framework. Prior to 4.1.136.Final and 4.2.16.Final, io.netty.handler.codec.dns.AbstractDnsRecord, io.netty.handler.codec.dns.DefaultDnsRecordDecoder.decodeRecord(), and io.netty.handler.codec.dns.DnsCodecUtil.decompressDomainName() failed to release retained or newly allocated ByteBuf objects when IDN.toASCII() or encodeDomainName() rejected a malformed domain name, allowing unauthenticated remote DNS packets to leak direct memory incrementally until denial of service. This issue is fixed in versions 4.1.136.Final and 4.2.16.Final."}]},{"artifact":{"id":"50c18bd3739ca012","cpes":["cpe:2.3:a:org.sonatype.oss:json:20231013:*:*:*:*:*:*:*","cpe:2.3:a:org.json:json:20231013:*:*:*:*:*:*:*","cpe:2.3:a:sonatype:json:20231013:*:*:*:*:*:*:*","cpe:2.3:a:json:json:20231013:*:*:*:*:*:*:*","cpe:2.3:a:oss:json:20231013:*:*:*:*:*:*:*"],"name":"json","purl":"pkg:maven/org.json/json@20231013","type":"java-archive","version":"20231013","language":"java","licenses":["https://github.com/stleary/JSON-java/blob/master/LICENSE"],"metadata":{"pomGroupID":"org.json","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/json-20231013.jar","manifestName":"","pomArtifactID":"json","archiveDigests":[{"value":"e22e0c040fe16f04ffdb85d851d77b07fc05ea52","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/json-20231013.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"20260719"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-ghc9-756g-vrcv","versionConstraint":">=20150729,<20260719 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.json:json","version":"20231013"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-ghc9-756g-vrcv","fix":{"state":"fixed","versions":["20260719"],"available":[{"date":"2026-11-10","kind":"first-observed","version":"20260719"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59171","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-59171","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59171","date":"2026-11-12","epss":0.00552,"percentile":0.46656}],"risk":0.30084,"urls":["https://github.com/stleary/JSON-java/security/advisories/GHSA-ghc9-756g-vrcv","https://nvd.nist.gov/vuln/detail/CVE-2026-59171","https://github.com/stleary/JSON-java/pull/1065","https://github.com/stleary/JSON-java/pull/1067","https://github.com/stleary/JSON-java/commit/703ac34a55400f9c50889e3d0c778b6d7962e81c","https://github.com/stleary/JSON-java/commit/ab92bb9088a37f9e346cd1dda66f6a3c40a201e0","https://github.com/stleary/JSON-java/commit/fce83c91bb229dde472283dea648a9a8955237fd","https://github.com/stleary/JSON-java/releases/tag/20260719"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-ghc9-756g-vrcv","description":"JSON-java: JSONTokener Has Unbounded Numeric String Resource-Exhaustion DoS"},"relatedVulnerabilities":[{"id":"CVE-2026-59171","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59171","cwe":"CWE-400","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-59171","cwe":"CWE-770","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59171","date":"2026-11-12","epss":0.00552,"percentile":0.46656}],"urls":["https://github.com/stleary/JSON-java/commit/703ac34a55400f9c50889e3d0c778b6d7962e81c","https://github.com/stleary/JSON-java/commit/ab92bb9088a37f9e346cd1dda66f6a3c40a201e0","https://github.com/stleary/JSON-java/commit/fce83c91bb229dde472283dea648a9a8955237fd","https://github.com/stleary/JSON-java/pull/1065","https://github.com/stleary/JSON-java/pull/1067","https://github.com/stleary/JSON-java/releases/tag/20260719","https://github.com/stleary/JSON-java/security/advisories/GHSA-ghc9-756g-vrcv"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59171","description":"JSON-java is a reference implementation of a JSON package in Java. From version 20150729 through 20260522, JSONTokener.nextSimpleValue can accumulate unbounded numeric tokens before JSONObject.stringToNumber passes them to BigInteger or BigDecimal conversion without a length limit. An application that parses attacker-controlled JSON or XML through JSONObject, JSONArray, or XML.toJSONObject can spend super-linear CPU time converting a sufficiently long numeric literal, blocking request-handling threads and causing denial of service. Strict mode and keep-strings settings in JSONParserConfiguration do not prevent the affected conversion path. Version 20260719 limits numeric conversion length."}]},{"artifact":{"id":"38371f85f698b6df","cpes":["cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.22.0:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.0","type":"java-archive","version":"2.22.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-2.22.0.jar","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":[{"value":"7aa54fc3755a9285eec2e73053bde1b9b845a9b2","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-2.22.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.22.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-wjgm-6hv5-3cvf","versionConstraint":">=2.22.0,<2.22.2 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.22.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-wjgm-6hv5-3cvf","fix":{"state":"fixed","versions":["2.22.2"],"available":[{"date":"2026-09-29","kind":"first-observed","version":"2.22.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19032","cwe":"CWE-470","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-19032","cwe":"CWE-610","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-19032","date":"2026-11-12","epss":0.00572,"percentile":0.4779}],"risk":0.29458,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-wjgm-6hv5-3cvf","description":"jackson-databind: Path Deserialization Missing Scheme Allowlist for FileSystemProvider Resolution"},"relatedVulnerabilities":[{"id":"CVE-2026-19032","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19032","cwe":"CWE-470","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-19032","cwe":"CWE-610","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-19032","date":"2026-11-12","epss":0.00572,"percentile":0.4779}],"urls":["https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19032","description":"jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without restricting the URI scheme. In JDKFromStringDeserializer.NioPathHelper.deserialize, a string bound from untrusted JSON is passed to new URI(value) and then to Path.of(uri). When that throws FileSystemNotFoundException, the code enumerates ServiceLoader<FileSystemProvider> and calls provider.getPath(uri) on the first provider whose scheme matches the attacker-chosen scheme. Untrusted JSON can therefore select and drive an arbitrary registered FileSystemProvider during readValue under a default JsonMapper, and forces provider class loading at the same time. With only the JDK built-in providers (file, jar/zipfs) present, the resolved path is inert and no mount or network I/O occurs; further impact requires a side-effecting third-party FileSystemProvider on the classpath. This affects com.fasterxml.jackson.core:jackson-databind from 2.8.0 before 2.18.10, from 2.19.0 before 2.21.6, and from 2.22.0 before 2.22.2, and tools.jackson.core:jackson-databind from 3.0.0 before 3.1.6 and from 3.2.0 before 3.2.2. Users should upgrade to 2.18.10, 2.21.6, 2.22.2, 3.1.6, or 3.2.2. Binding java.nio.file.Path from untrusted JSON should be avoided regardless of version."}]},{"artifact":{"id":"90a279e83dd2fa78","cpes":["cpe:2.3:a:jackson-databind:jackson-databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:3.2.0:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/tools.jackson.core/jackson-databind@3.2.0","type":"java-archive","version":"3.2.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"tools.jackson.core","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-3.2.0.jar","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":[{"value":"45c1083a04086e6b7a0d008ac6c56655567690d0","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-3.2.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.2.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-wjgm-6hv5-3cvf","versionConstraint":">=3.2.0,<3.2.2 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"tools.jackson.core:jackson-databind","version":"3.2.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-wjgm-6hv5-3cvf","fix":{"state":"fixed","versions":["3.2.2"],"available":[{"date":"2026-09-29","kind":"first-observed","version":"3.2.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19032","cwe":"CWE-470","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-19032","cwe":"CWE-610","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-19032","date":"2026-11-12","epss":0.00572,"percentile":0.4779}],"risk":0.29458,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf","https://nvd.nist.gov/vuln/detail/CVE-2026-19032","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.10","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.6","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.2","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.6","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.2"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-wjgm-6hv5-3cvf","description":"jackson-databind: Path Deserialization Missing Scheme Allowlist for FileSystemProvider Resolution"},"relatedVulnerabilities":[{"id":"CVE-2026-19032","cvss":[{"type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-19032","cwe":"CWE-470","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"},{"cve":"CVE-2026-19032","cwe":"CWE-610","type":"Secondary","source":"36c7be3b-2937-45df-85ea-ca7133ea542c"}],"epss":[{"cve":"CVE-2026-19032","date":"2026-11-12","epss":0.00572,"percentile":0.4779}],"urls":["https://github.com/FasterXML/jackson-databind/commit/cc6756b61ed90b6b9227f670e0408d5d9bd48551","https://github.com/FasterXML/jackson-databind/commit/ce26eda3481cd796f76ba4c53ffe1da23b53f166","https://github.com/FasterXML/jackson-databind/commit/d94bb632becfe0ba96926b9909ab06d1f87aad6d","https://github.com/FasterXML/jackson-databind/pull/6129","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-wjgm-6hv5-3cvf"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-19032","description":"jackson-databind's deserializer for java.nio.file.Path resolves an attacker-supplied URI without restricting the URI scheme. In JDKFromStringDeserializer.NioPathHelper.deserialize, a string bound from untrusted JSON is passed to new URI(value) and then to Path.of(uri). When that throws FileSystemNotFoundException, the code enumerates ServiceLoader<FileSystemProvider> and calls provider.getPath(uri) on the first provider whose scheme matches the attacker-chosen scheme. Untrusted JSON can therefore select and drive an arbitrary registered FileSystemProvider during readValue under a default JsonMapper, and forces provider class loading at the same time. With only the JDK built-in providers (file, jar/zipfs) present, the resolved path is inert and no mount or network I/O occurs; further impact requires a side-effecting third-party FileSystemProvider on the classpath. This affects com.fasterxml.jackson.core:jackson-databind from 2.8.0 before 2.18.10, from 2.19.0 before 2.21.6, and from 2.22.0 before 2.22.2, and tools.jackson.core:jackson-databind from 3.0.0 before 3.1.6 and from 3.2.0 before 3.2.2. Users should upgrade to 2.18.10, 2.21.6, 2.22.2, 3.1.6, or 3.2.2. Binding java.nio.file.Path from untrusted JSON should be avoided regardless of version."}]},{"artifact":{"id":"ec31449ccf88792a","cpes":["cpe:2.3:a:io.netty.handler:netty-handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.handler:netty_handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-handler:netty-handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-handler:netty_handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty-handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty_handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_handler:netty-handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_handler:netty_handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty-handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty_handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.handler:handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty-handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty_handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:handler:netty-handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:handler:netty_handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-handler:handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_handler:handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty-handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty_handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:handler:handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:handler:4.2.15.Final:*:*:*:*:*:*:*"],"name":"netty-handler","purl":"pkg:maven/io.netty/netty-handler@4.2.15.Final","type":"java-archive","version":"4.2.15.Final","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0"],"metadata":{"pomGroupID":"io.netty","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-handler-4.2.15.Final.jar","manifestName":"","pomArtifactID":"netty-handler","archiveDigests":[{"value":"d5344afd1148e3b9927a74be019605ebb0937a93","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-handler-4.2.15.Final.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"4.2.17.Final"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-c4c3-7fpv-j4q5","versionConstraint":">=4.2.0.Final,<=4.2.16.Final (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"io.netty:netty-handler","version":"4.2.15.Final"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-c4c3-7fpv-j4q5","fix":{"state":"fixed","versions":["4.2.17.Final"],"available":[{"date":"2026-09-09","kind":"first-observed","version":"4.2.17.Final"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N","metrics":{"baseScore":9.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75595","cwe":"CWE-754","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-75595","date":"2026-11-12","epss":0.00316,"percentile":0.24825}],"risk":0.28598,"urls":["https://github.com/netty/netty/security/advisories/GHSA-c4c3-7fpv-j4q5","https://nvd.nist.gov/vuln/detail/CVE-2026-75595","https://github.com/netty/netty/pull/17213","https://github.com/netty/netty/pull/17217","https://github.com/netty/netty/commit/1b5abc6443b63726c72cdd285af2feb7ddbb8ff7","https://github.com/netty/netty/commit/9e0519239108a69b7e9bbc5e9182ee139a0d7961","https://github.com/netty/netty/releases/tag/netty-4.1.137.Final","https://github.com/netty/netty/releases/tag/netty-4.2.17.Final"],"severity":"Critical","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-c4c3-7fpv-j4q5","description":"Netty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext"},"relatedVulnerabilities":[{"id":"CVE-2026-75595","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":9.1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75595","cwe":"CWE-754","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-75595","date":"2026-11-12","epss":0.00316,"percentile":0.24825}],"urls":["https://github.com/netty/netty/commit/1b5abc6443b63726c72cdd285af2feb7ddbb8ff7","https://github.com/netty/netty/commit/9e0519239108a69b7e9bbc5e9182ee139a0d7961","https://github.com/netty/netty/pull/17213","https://github.com/netty/netty/pull/17217","https://github.com/netty/netty/releases/tag/netty-4.1.137.Final","https://github.com/netty/netty/releases/tag/netty-4.2.17.Final","https://github.com/netty/netty/security/advisories/GHSA-c4c3-7fpv-j4q5"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75595","description":"Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Fina and 4.2.17.Final, io.netty.handler.ssl.SslClientHelloHandler#decode checks the wrong offset before reading the four-byte TLS handshake header, so a ClientHello whose handshake header spans records can cause an IndexOutOfBoundsException and invoke select(ctx, null). This selects the default SslContext instead of the SNI-specific context. In deployments where per-SNI clientAuth=REQUIRE is the sole mutual TLS gate, the default SslContext uses clientAuth=NONE or clientAuth=OPTIONAL, and no application-layer certificate verification exists, an unauthenticated remote attacker can bypass the protected route's mutual TLS requirement. This issue is fixed in versions 4.1.137.Final and 4.2.17.Final."}]},{"artifact":{"id":"6385b0468b6b1bbd","cpes":["cpe:2.3:a:com.google.guava:guava:33.4.8-jre:*:*:*:*:*:*:*","cpe:2.3:a:google:guava:33.4.8-jre:*:*:*:*:*:*:*","cpe:2.3:a:guava:guava:33.4.8-jre:*:*:*:*:*:*:*"],"name":"guava","purl":"pkg:maven/com.google.guava/guava@33.4.8-jre","type":"java-archive","version":"33.4.8-jre","language":"java","licenses":["http://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.google.guava","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/guava-33.4.8-jre.jar","manifestName":"","pomArtifactID":"guava","archiveDigests":[{"value":"e70a3268e6cd3e7d458aa15787ce6811c34e96ae","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/guava-33.4.8-jre.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"33.7.2"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-xxph-c9ww-hj94","versionConstraint":">=4.0,<=33.7.1 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.google.guava:guava","version":"33.4.8-jre"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-xxph-c9ww-hj94","fix":{"state":"fixed","versions":["33.7.2"],"available":[{"date":"2026-10-27","kind":"first-observed","version":"33.7.2"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102554","cwe":"CWE-502","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2026-102554","cwe":"CWE-770","type":"Secondary","source":"cve-coordination@google.com"}],"epss":[{"cve":"CVE-2026-102554","date":"2026-11-12","epss":0.00352,"percentile":0.29279}],"risk":0.25608000000000003,"urls":["https://github.com/google/guava/security/advisories/GHSA-xxph-c9ww-hj94","https://nvd.nist.gov/vuln/detail/CVE-2026-102554","https://github.com/google/guava/commit/b931fe9d6d5cf00bc55714ad3308d086f71850fe","https://github.com/google/guava/releases/tag/v33.7.2"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-xxph-c9ww-hj94","description":"Google Guava: CompactHashMap/CompactHashSet/MapMakerInternalMap deserialization triggers uncontrolled memory allocation"},"relatedVulnerabilities":[{"id":"CVE-2026-102554","cvss":[{"type":"Secondary","source":"cve-coordination@google.com","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-102554","cwe":"CWE-502","type":"Secondary","source":"cve-coordination@google.com"},{"cve":"CVE-2026-102554","cwe":"CWE-770","type":"Secondary","source":"cve-coordination@google.com"}],"epss":[{"cve":"CVE-2026-102554","date":"2026-11-12","epss":0.00352,"percentile":0.29279}],"urls":["https://github.com/google/guava/commit/b931fe9d6d5cf00bc55714ad3308d086f71850fe","https://github.com/google/guava/releases/tag/v33.7.2","https://github.com/google/guava/security/advisories/GHSA-xxph-c9ww-hj94"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-102554","description":"Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerInternalMap instances, Guava eagerly allocates an array based on a caller-specified size parameter without throttling, permitting memory exhaustion from crafted serialization streams."}]},{"artifact":{"id":"aa07c6d10e1ccaf1","cpes":["cpe:2.3:a:io.netty.codec-http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:codec_http:4.2.15.Final:*:*:*:*:*:*:*"],"name":"netty-codec-http","purl":"pkg:maven/io.netty/netty-codec-http@4.2.15.Final","type":"java-archive","version":"4.2.15.Final","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0"],"metadata":{"pomGroupID":"io.netty","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-codec-http-4.2.15.Final.jar","manifestName":"","pomArtifactID":"netty-codec-http","archiveDigests":[{"value":"e611826aa054371bb9a17f27bdb05755a4cac5f0","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-codec-http-4.2.15.Final.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"4.2.16.Final"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-gcjf-9mgh-3p7g","versionConstraint":">=4.2.0.Final,<4.2.16.Final (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"io.netty:netty-codec-http","version":"4.2.15.Final"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-gcjf-9mgh-3p7g","fix":{"state":"fixed","versions":["4.2.16.Final"],"available":[{"date":"2026-07-23","kind":"first-observed","version":"4.2.16.Final"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.7,"impactScore":3.6,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59921","cwe":"CWE-93","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59921","date":"2026-11-12","epss":0.00465,"percentile":0.40776}],"risk":0.248775,"urls":["https://github.com/netty/netty/security/advisories/GHSA-gcjf-9mgh-3p7g","https://github.com/netty/netty/releases/tag/netty-4.1.136.Final","https://github.com/netty/netty/releases/tag/netty-4.2.16.Final"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-gcjf-9mgh-3p7g","description":"Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder"},"relatedVulnerabilities":[{"id":"CVE-2026-59921","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.7,"impactScore":3.6,"exploitabilityScore":2.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59921","cwe":"CWE-93","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59921","date":"2026-11-12","epss":0.00465,"percentile":0.40776}],"urls":["https://github.com/netty/netty/security/advisories/GHSA-gcjf-9mgh-3p7g"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59921","description":"Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, HttpPostRequestEncoder constructs multipart HTTP request bodies by directly concatenating user-supplied filenames and field names into Content-Disposition MIME headers without validating or sanitizing CRLF characters (\\r\\n). Since MIME headers are delimited by CRLF, an attacker who controls the filename can inject arbitrary MIME headers into the multipart body part. The root cause is that neither the encoder nor the FileUpload implementations' setFilename() methods, which only check for null, neutralize CRLF characters before the filename is embedded into the header. This issue has been fixed in versions 4.1.136.Final and 4.2.16.Final."}]},{"artifact":{"id":"aa07c6d10e1ccaf1","cpes":["cpe:2.3:a:io.netty.codec-http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:codec_http:4.2.15.Final:*:*:*:*:*:*:*"],"name":"netty-codec-http","purl":"pkg:maven/io.netty/netty-codec-http@4.2.15.Final","type":"java-archive","version":"4.2.15.Final","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0"],"metadata":{"pomGroupID":"io.netty","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-codec-http-4.2.15.Final.jar","manifestName":"","pomArtifactID":"netty-codec-http","archiveDigests":[{"value":"e611826aa054371bb9a17f27bdb05755a4cac5f0","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-codec-http-4.2.15.Final.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"4.2.16.Final"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-4mp9-239f-g9hg","versionConstraint":">=4.2.0.Final,<=4.2.15.Final (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"io.netty:netty-codec-http","version":"4.2.15.Final"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-4mp9-239f-g9hg","fix":{"state":"fixed","versions":["4.2.16.Final"],"available":[{"date":"2026-07-23","kind":"first-observed","version":"4.2.16.Final"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59898","cwe":"CWE-444","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59898","date":"2026-11-12","epss":0.00439,"percentile":0.38642}],"risk":0.24803499999999998,"urls":["https://github.com/netty/netty/security/advisories/GHSA-4mp9-239f-g9hg","https://github.com/netty/netty/releases/tag/netty-4.1.136.Final","https://github.com/netty/netty/releases/tag/netty-4.2.16.Final"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-4mp9-239f-g9hg","description":"Netty: WebSockets V07/V08 handshaker missing Connection/Upgrade validation"},"relatedVulnerabilities":[{"id":"CVE-2026-59898","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59898","cwe":"CWE-444","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59898","date":"2026-11-12","epss":0.00439,"percentile":0.38642}],"urls":["https://github.com/netty/netty/releases/tag/netty-4.1.136.Final","https://github.com/netty/netty/releases/tag/netty-4.2.16.Final","https://github.com/netty/netty/security/advisories/GHSA-4mp9-239f-g9hg"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59898","description":"Netty is an asynchronous, event-driven network application framework.  Prior to versions 4.1.136.Final and 4.2.16.Final, ab attacker can force WebSocket upgrade via the lax V07 (or V08) handshaker by sending `Sec-WebSocket-Version: 7` and omitting `Connection: Upgrade` / `Upgrade: websocket` headers, completing a protocol switch that a proxy would not recognize as an Upgrade request and enabling HTTP request smuggling / protocol-confusion attacks. This issue has been fixed in versions 4.1.136.Final and 4.2.16.Final."}]},{"artifact":{"id":"193eb40fb65beba6","cpes":["cpe:2.3:a:zlib:zlib:1.3.2-r1:*:*:*:*:*:*:*"],"name":"zlib","purl":"pkg:apk/alpine/zlib@1.3.2-r1?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.3.2-r1","language":"","licenses":["Zlib"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/libz.so.1"},{"path":"/usr/lib/libz.so.1.3.2"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"zlib"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.4-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-4738","versionConstraint":"< 1.4-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"zlib","version":"1.3.2-r1"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"1.4-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-4738","versionConstraint":"< 1.4-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"zlib","version":"1.3.2-r1"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-4738","fix":{"state":"fixed","versions":["1.4-r0"],"available":[{"date":"2026-11-07","kind":"first-observed","version":"1.4-r0"}]},"cvss":[{"type":"Secondary","source":"cve_disclosure@tech.gov.sg","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:U/V:C/RE:L/U:Amber","metrics":{"baseScore":9.4},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4738","cwe":"CWE-119","type":"Secondary","source":"cve_disclosure@tech.gov.sg"}],"epss":[{"cve":"CVE-2026-4738","date":"2026-11-12","epss":0.00269,"percentile":0.19241}],"risk":0.24748,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-4738"},"relatedVulnerabilities":[{"id":"CVE-2026-4738","cvss":[{"type":"Secondary","source":"cve_disclosure@tech.gov.sg","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:U/V:C/RE:L/U:Amber","metrics":{"baseScore":9.4},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-4738","cwe":"CWE-119","type":"Secondary","source":"cve_disclosure@tech.gov.sg"}],"epss":[{"cve":"CVE-2026-4738","date":"2026-11-12","epss":0.00269,"percentile":0.19241}],"urls":["https://github.com/OSGeo/gdal/pull/12244"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-4738","description":"Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal (frmts/zlib/contrib/infback9 modules). This vulnerability is associated with program files inftree9.C‎.\n\nThis issue affects gdal: before 3.11.0."}]},{"artifact":{"id":"db0be20435ff9026","cpes":["cpe:2.3:a:gnu:tar:1.35-r5:*:*:*:*:*:*:*","cpe:2.3:a:tar:tar:1.35-r5:*:*:*:*:*:*:*"],"name":"tar","purl":"pkg:apk/alpine/tar@1.35-r5?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.35-r5","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/tar"},{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/rmt"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"tar"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:tar:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-5704","versionConstraint":"none (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:tar:1.35:*:*:*:*:*:*:*"],"package":{"name":"tar","version":"1.35-r5"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-5704","fix":{"state":"","versions":[]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.5,"impactScore":3.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":5,"impactScore":3.6,"exploitabilityScore":1.4},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-5704","cwe":"CWE-434","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-5704","date":"2026-11-12","epss":0.00473,"percentile":0.41388}],"risk":0.24241249999999998,"urls":["https://access.redhat.com/errata/RHSA-2026:61581","https://access.redhat.com/errata/RHSA-2026:61586","https://access.redhat.com/errata/RHSA-2026:61783","https://access.redhat.com/errata/RHSA-2026:66018","https://access.redhat.com/errata/RHSA-2026:66514","https://access.redhat.com/errata/RHSA-2026:70390","https://access.redhat.com/security/cve/CVE-2026-5704","https://bugzilla.redhat.com/show_bug.cgi?id=2455360","http://www.openwall.com/lists/oss-security/2026/04/11/10","http://www.openwall.com/lists/oss-security/2026/04/11/11","http://www.openwall.com/lists/oss-security/2026/04/12/2"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-5704","description":"A flaw was found in tar. A remote attacker could exploit this vulnerability by crafting a malicious archive, leading to hidden file injection with fully attacker-controlled content. This bypasses pre-extraction inspection mechanisms, potentially allowing an attacker to introduce malicious files onto a system without detection."},"relatedVulnerabilities":[]},{"artifact":{"id":"a642baa7504f48aa","cpes":["cpe:2.3:a:io.netty.codec-http2:netty-codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http2:netty_codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http2:netty-codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http2:netty_codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http2:netty-codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http2:netty_codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http2:codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http2:codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty-codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty_codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty-codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty_codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http2:netty-codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http2:netty_codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http2:netty-codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http2:netty_codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http2:codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http2:codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:netty-codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:netty_codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:netty-codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:netty_codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http2:codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http2:codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty-codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty_codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http2:codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http2:codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:netty-codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:netty_codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http2:codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http2:codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty-codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty_codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:codec_http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:codec-http2:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:codec_http2:4.2.15.Final:*:*:*:*:*:*:*"],"name":"netty-codec-http2","purl":"pkg:maven/io.netty/netty-codec-http2@4.2.15.Final","type":"java-archive","version":"4.2.15.Final","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0"],"metadata":{"pomGroupID":"io.netty","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-codec-http2-4.2.15.Final.jar","manifestName":"","pomArtifactID":"netty-codec-http2","archiveDigests":[{"value":"c70540243427c8c952473f55813c6d459817de42","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-codec-http2-4.2.15.Final.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"4.2.16.Final"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-c69g-56f8-xwqj","versionConstraint":">=4.2.0.Final,<=4.2.15.Final (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"io.netty:netty-codec-http2","version":"4.2.15.Final"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-c69g-56f8-xwqj","fix":{"state":"fixed","versions":["4.2.16.Final"],"available":[{"date":"2026-07-23","kind":"first-observed","version":"4.2.16.Final"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59900","cwe":"CWE-444","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59900","date":"2026-11-12","epss":0.00398,"percentile":0.34539}],"risk":0.23680999999999996,"urls":["https://github.com/netty/netty/security/advisories/GHSA-c69g-56f8-xwqj","https://github.com/netty/netty/releases/tag/netty-4.1.136.Final","https://github.com/netty/netty/releases/tag/netty-4.2.16.Final"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-c69g-56f8-xwqj","description":"Netty: [codec-http2] Lack of Host Header Deduplication in HTTP/2→HTTP/1.x Translation Leads to Request Routing Bypass"},"relatedVulnerabilities":[{"id":"CVE-2026-59900","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59900","cwe":"CWE-444","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59900","date":"2026-11-12","epss":0.00398,"percentile":0.34539}],"urls":["https://github.com/netty/netty/releases/tag/netty-4.1.136.Final","https://github.com/netty/netty/releases/tag/netty-4.2.16.Final","https://github.com/netty/netty/security/advisories/GHSA-c69g-56f8-xwqj"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59900","description":"Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, Netty's HTTP/2-to-HTTP/1.x translation layer (`Http2StreamFrameToHttpObjectCodec` and `InboundHttp2ToHttpAdapter`) fails to deduplicate or validate `Host` headers when an HTTP/2 client supplies both the `:authority` pseudo-header and a literal `host` header in a single HEADERS frame. The translator maps `:authority` to `Host` and separately copies the literal `host` header, producing an `HttpRequest` object containing two `Host` headers with attacker-controlled differing values. This issue has been fixed in versions 4.1.136.Final and 4.2.16.Final."}]},{"artifact":{"id":"aa07c6d10e1ccaf1","cpes":["cpe:2.3:a:io.netty.codec-http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:codec_http:4.2.15.Final:*:*:*:*:*:*:*"],"name":"netty-codec-http","purl":"pkg:maven/io.netty/netty-codec-http@4.2.15.Final","type":"java-archive","version":"4.2.15.Final","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0"],"metadata":{"pomGroupID":"io.netty","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-codec-http-4.2.15.Final.jar","manifestName":"","pomArtifactID":"netty-codec-http","archiveDigests":[{"value":"e611826aa054371bb9a17f27bdb05755a4cac5f0","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-codec-http-4.2.15.Final.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"4.2.16.Final"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-6cqp-g7gg-8hr5","versionConstraint":">=4.2.0.Final,<4.2.16.Final (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"io.netty:netty-codec-http","version":"4.2.15.Final"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-6cqp-g7gg-8hr5","fix":{"state":"fixed","versions":["4.2.16.Final"],"available":[{"date":"2026-07-23","kind":"first-observed","version":"4.2.16.Final"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56746","cwe":"CWE-284","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-56746","date":"2026-11-12","epss":0.00408,"percentile":0.3559}],"risk":0.2346,"urls":["https://github.com/netty/netty/security/advisories/GHSA-6cqp-g7gg-8hr5","https://nvd.nist.gov/vuln/detail/CVE-2026-56746","https://github.com/netty/netty/releases/tag/netty-4.1.136.Final","https://github.com/netty/netty/releases/tag/netty-4.2.16.Final"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-6cqp-g7gg-8hr5","description":"Netty: Security Control Bypass via CORS Short-Circuit Failure"},"relatedVulnerabilities":[{"id":"CVE-2026-56746","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56746","cwe":"CWE-284","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-56746","date":"2026-11-12","epss":0.00408,"percentile":0.3559}],"urls":["https://github.com/netty/netty/releases/tag/netty-4.1.136.Final","https://github.com/netty/netty/releases/tag/netty-4.2.16.Final","https://github.com/netty/netty/security/advisories/GHSA-6cqp-g7gg-8hr5"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56746","description":"Netty is a network application framework for development of protocol servers and clients. Versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, are vulnerable to security control bypass during the origin evaluation process. CorsHandler provides a shortCircuit() configuration designed to reject unauthorized cross-origin requests immediately, acting as a security control before requests reach the application. However, due to a logical operator error in the origin evaluation process, this protection can be entirely bypassed. An attacker can bypass the short-circuit mechanism by sending a request with an Origin: null header. This failure forwards unauthorized requests to the backend application, bypassing intended access controls. This issue is fixed in versions 4.1.136.Final and 4.2.16.Final."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-114820","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114820","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-114820","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114820","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114820","date":"2026-11-12","epss":0.00253,"percentile":0.16962}],"risk":0.22896500000000003,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-114820"},"relatedVulnerabilities":[{"id":"CVE-2026-114820","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114820","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114820","date":"2026-11-12","epss":0.00253,"percentile":0.16962}],"urls":["https://www.oracle.com/security-alerts/alert-cve-2026-114820.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114820","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle GraalVM for JDK: 17.0.21.0.2 and  21.0.13.0.2; Oracle GraalVM Enterprise Edition: 21.3.20.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114820","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-114820","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114820","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114820","date":"2026-11-12","epss":0.00253,"percentile":0.16962}],"risk":0.22896500000000003,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-114820"},"relatedVulnerabilities":[{"id":"CVE-2026-114820","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114820","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114820","date":"2026-11-12","epss":0.00253,"percentile":0.16962}],"urls":["https://www.oracle.com/security-alerts/alert-cve-2026-114820.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114820","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle GraalVM for JDK: 17.0.21.0.2 and  21.0.13.0.2; Oracle GraalVM Enterprise Edition: 21.3.20.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114820","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-114820","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114820","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114820","date":"2026-11-12","epss":0.00253,"percentile":0.16962}],"risk":0.22896500000000003,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-114820"},"relatedVulnerabilities":[{"id":"CVE-2026-114820","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114820","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114820","date":"2026-11-12","epss":0.00253,"percentile":0.16962}],"urls":["https://www.oracle.com/security-alerts/alert-cve-2026-114820.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114820","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle GraalVM for JDK: 17.0.21.0.2 and  21.0.13.0.2; Oracle GraalVM Enterprise Edition: 21.3.20.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114820","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-114820","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114820","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114820","date":"2026-11-12","epss":0.00253,"percentile":0.16962}],"risk":0.22896500000000003,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-114820"},"relatedVulnerabilities":[{"id":"CVE-2026-114820","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114820","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114820","date":"2026-11-12","epss":0.00253,"percentile":0.16962}],"urls":["https://www.oracle.com/security-alerts/alert-cve-2026-114820.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114820","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle GraalVM for JDK: 17.0.21.0.2 and  21.0.13.0.2; Oracle GraalVM Enterprise Edition: 21.3.20.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114820","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-114820","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114820","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114820","date":"2026-11-12","epss":0.00253,"percentile":0.16962}],"risk":0.22896500000000003,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-114820"},"relatedVulnerabilities":[{"id":"CVE-2026-114820","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114820","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114820","date":"2026-11-12","epss":0.00253,"percentile":0.16962}],"urls":["https://www.oracle.com/security-alerts/alert-cve-2026-114820.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114820","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle GraalVM for JDK: 17.0.21.0.2 and  21.0.13.0.2; Oracle GraalVM Enterprise Edition: 21.3.20.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114820","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-114820","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114820","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114820","date":"2026-11-12","epss":0.00253,"percentile":0.16962}],"risk":0.22896500000000003,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-114820"},"relatedVulnerabilities":[{"id":"CVE-2026-114820","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114820","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114820","date":"2026-11-12","epss":0.00253,"percentile":0.16962}],"urls":["https://www.oracle.com/security-alerts/alert-cve-2026-114820.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114820","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle GraalVM for JDK: 17.0.21.0.2 and  21.0.13.0.2; Oracle GraalVM Enterprise Edition: 21.3.20.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-114820","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-114820","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114820","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114820","date":"2026-11-12","epss":0.00253,"percentile":0.16962}],"risk":0.22896500000000003,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-114820"},"relatedVulnerabilities":[{"id":"CVE-2026-114820","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-114820","cwe":"CWE-327","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-114820","date":"2026-11-12","epss":0.00253,"percentile":0.16962}],"urls":["https://www.oracle.com/security-alerts/alert-cve-2026-114820.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-114820","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u511-b32, 8u511-perf-b32, 11.0.33.0.2, 17.0.21.0.2, 21.0.13.0.2, 25.0.5.0.2, 27.0.1.0.2; Oracle GraalVM for JDK: 17.0.21.0.2 and  21.0.13.0.2; Oracle GraalVM Enterprise Edition: 21.3.20.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."}]},{"artifact":{"id":"38371f85f698b6df","cpes":["cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.22.0:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.0","type":"java-archive","version":"2.22.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-2.22.0.jar","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":[{"value":"7aa54fc3755a9285eec2e73053bde1b9b845a9b2","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-2.22.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.22.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-5jmj-h7xm-6q6v","versionConstraint":">=2.22.0,<2.22.1 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.22.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-5jmj-h7xm-6q6v","fix":{"state":"fixed","versions":["2.22.1"],"available":[{"date":"2026-07-17","kind":"first-observed","version":"2.22.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54515","cwe":"CWE-915","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-54515","date":"2026-11-12","epss":0.00443,"percentile":0.38961}],"risk":0.228145,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5jmj-h7xm-6q6v","https://github.com/FasterXML/jackson-databind/issues/5962","https://github.com/FasterXML/jackson-databind/issues/5964","https://github.com/FasterXML/jackson-databind/commit/0e1b0b211f7a53baa62ba2f4c9bd006c7bf4d5fa","https://nvd.nist.gov/vuln/detail/CVE-2026-54515"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-5jmj-h7xm-6q6v","description":"jackson-databind has case-insensitive deserialization bypasses per-property @JsonIgnoreProperties"},"relatedVulnerabilities":[{"id":"CVE-2026-54515","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54515","cwe":"CWE-915","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-54515","date":"2026-11-12","epss":0.00443,"percentile":0.38961}],"urls":["https://github.com/FasterXML/jackson-databind/commit/0e1b0b211f7a53baa62ba2f4c9bd006c7bf4d5fa","https://github.com/FasterXML/jackson-databind/issues/5962","https://github.com/FasterXML/jackson-databind/issues/5964","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5jmj-h7xm-6q6v"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54515","description":"jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.8.0 until 2.18.9, 2.21.5, and 3.1.4, in BeanDeserializerBase.createContextual(), per-property @JsonIgnoreProperties exclusions are applied by _handleByNameInclusion(), producing a contextual deserializer whose BeanPropertyMap has the ignored properties removed. The subsequent per-property case-insensitivity block (triggered by @JsonFormat(ACCEPT_CASE_INSENSITIVE_PROPERTIES)) rebuilds from this._beanProperties (the original, unfiltered map) instead of contextual._beanProperties, then overwrites the filtered map — restoring every property _handleByNameInclusion had just removed. The ignored property becomes writable again. This vulnerability is fixed in 2.18.9, 2.21.5, and 3.1.4."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91373","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91373","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91373","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-12","epss":0.00441,"percentile":0.38795}],"risk":0.227115,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91373"},"relatedVulnerabilities":[{"id":"CVE-2026-91373","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-12","epss":0.00441,"percentile":0.38795}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91373","description":"Vulnerability in Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91373","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91373","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-12","epss":0.00441,"percentile":0.38795}],"risk":0.227115,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91373"},"relatedVulnerabilities":[{"id":"CVE-2026-91373","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-12","epss":0.00441,"percentile":0.38795}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91373","description":"Vulnerability in Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91373","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91373","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-12","epss":0.00441,"percentile":0.38795}],"risk":0.227115,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91373"},"relatedVulnerabilities":[{"id":"CVE-2026-91373","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-12","epss":0.00441,"percentile":0.38795}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91373","description":"Vulnerability in Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91373","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91373","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-12","epss":0.00441,"percentile":0.38795}],"risk":0.227115,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91373"},"relatedVulnerabilities":[{"id":"CVE-2026-91373","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-12","epss":0.00441,"percentile":0.38795}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91373","description":"Vulnerability in Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91373","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91373","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-12","epss":0.00441,"percentile":0.38795}],"risk":0.227115,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91373"},"relatedVulnerabilities":[{"id":"CVE-2026-91373","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-12","epss":0.00441,"percentile":0.38795}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91373","description":"Vulnerability in Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91373","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91373","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-12","epss":0.00441,"percentile":0.38795}],"risk":0.227115,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91373"},"relatedVulnerabilities":[{"id":"CVE-2026-91373","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-12","epss":0.00441,"percentile":0.38795}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91373","description":"Vulnerability in Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91373","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91373","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-12","epss":0.00441,"percentile":0.38795}],"risk":0.227115,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91373"},"relatedVulnerabilities":[{"id":"CVE-2026-91373","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91373","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91373","date":"2026-11-12","epss":0.00441,"percentile":0.38795}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91373","description":"Vulnerability in Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"8de79d211419e1a7","cpes":["cpe:2.3:a:apache:shiro-core:1.13.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:shiro_core:1.13.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:shiro:1.13.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:core:1.13.0:*:*:*:*:*:*:*"],"name":"shiro-core","purl":"pkg:maven/org.apache.shiro/shiro-core@1.13.0","type":"java-archive","version":"1.13.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.apache.shiro","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/shiro-core-1.13.0.jar","manifestName":"","pomArtifactID":"shiro-core","archiveDigests":[{"value":"7e542e3d614b197bf10005e98e19f9f19cb943e7","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/shiro-core-1.13.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.2.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-fcvm-3cpj-f9qx","versionConstraint":">=1.0.0-incubating,<2.2.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.shiro:shiro-core","version":"1.13.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-fcvm-3cpj-f9qx","fix":{"state":"fixed","versions":["2.2.0"],"available":[{"date":"2026-07-01","kind":"first-observed","version":"2.2.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/RE:L/U:Amber","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-43827","cwe":"CWE-384","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-43827","date":"2026-11-12","epss":0.00412,"percentile":0.35996}],"risk":0.22454000000000002,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-43827","https://shiro.apache.org/security-reports.html#cve_2026_43827","http://www.openwall.com/lists/oss-security/2026/05/25/6"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-fcvm-3cpj-f9qx","description":"Apache Shiro has a session fixation vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2026-43827","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@apache.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:L/U:Amber","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-43827","cwe":"CWE-384","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-43827","date":"2026-11-12","epss":0.00412,"percentile":0.35996}],"urls":["https://shiro.apache.org/security-reports.html#cve_2026_43827","http://www.openwall.com/lists/oss-security/2026/05/25/6"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-43827","description":"Default configurations of Apache Shiro have a session fixation vulnerability.\n\nThis issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1.\n\nUsers are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue.\n\nIn the affected versions, when a session already exists, it is not invalidated upon successful login, nor is a new session being generated with a new ID."}]},{"artifact":{"id":"ec31449ccf88792a","cpes":["cpe:2.3:a:io.netty.handler:netty-handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.handler:netty_handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-handler:netty-handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-handler:netty_handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty-handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty_handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_handler:netty-handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_handler:netty_handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty-handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty_handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.handler:handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty-handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty_handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:handler:netty-handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:handler:netty_handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-handler:handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_handler:handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty-handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty_handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:handler:handler:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:handler:4.2.15.Final:*:*:*:*:*:*:*"],"name":"netty-handler","purl":"pkg:maven/io.netty/netty-handler@4.2.15.Final","type":"java-archive","version":"4.2.15.Final","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0"],"metadata":{"pomGroupID":"io.netty","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-handler-4.2.15.Final.jar","manifestName":"","pomArtifactID":"netty-handler","archiveDigests":[{"value":"d5344afd1148e3b9927a74be019605ebb0937a93","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-handler-4.2.15.Final.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"4.2.17.Final"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-fccg-mwvh-qqg4","versionConstraint":">=4.2.0.Final,<=4.2.16.Final (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"io.netty:netty-handler","version":"4.2.15.Final"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-fccg-mwvh-qqg4","fix":{"state":"fixed","versions":["4.2.17.Final"],"available":[{"date":"2026-09-09","kind":"first-observed","version":"4.2.17.Final"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","metrics":{"baseScore":6.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75596","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-75596","date":"2026-11-12","epss":0.00374,"percentile":0.318}],"risk":0.22253,"urls":["https://github.com/netty/netty/security/advisories/GHSA-fccg-mwvh-qqg4","https://nvd.nist.gov/vuln/detail/CVE-2026-75596","https://github.com/netty/netty/pull/17213","https://github.com/netty/netty/pull/17217","https://github.com/netty/netty/commit/1b5abc6443b63726c72cdd285af2feb7ddbb8ff7","https://github.com/netty/netty/commit/9e0519239108a69b7e9bbc5e9182ee139a0d7961","https://github.com/netty/netty/releases/tag/netty-4.1.137.Final","https://github.com/netty/netty/releases/tag/netty-4.2.17.Final"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-fccg-mwvh-qqg4","description":"Netty: Fragmented ClientHello records trigger quadratic pre-handshake reassembly in default SNI parsing"},"relatedVulnerabilities":[{"id":"CVE-2026-75596","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.7},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-75596","cwe":"CWE-407","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-75596","date":"2026-11-12","epss":0.00374,"percentile":0.318}],"urls":["https://github.com/netty/netty/commit/1b5abc6443b63726c72cdd285af2feb7ddbb8ff7","https://github.com/netty/netty/commit/9e0519239108a69b7e9bbc5e9182ee139a0d7961","https://github.com/netty/netty/pull/17213","https://github.com/netty/netty/pull/17217","https://github.com/netty/netty/releases/tag/netty-4.1.137.Final","https://github.com/netty/netty/releases/tag/netty-4.2.17.Final","https://github.com/netty/netty/security/advisories/GHSA-fccg-mwvh-qqg4"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-75596","description":"Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, the default io.netty.handler.ssl.SniHandler constructors use the pre-handshake ClientHello aggregation path in handler/src/main/java/io/netty/handler/ssl/SslClientHelloHandler.java at io.netty.handler.ssl.SslClientHelloHandler#decode, where handshakeBuffer.clear() and writeBytes() recopy all previously received body bytes for every additional TLS record. An unauthenticated remote peer can advertise a large ClientHello and deliver its body in thousands of tiny records, causing quadratic CPU work on the event loop before the TLS handshake completes and degrading TLS handling for other clients. This issue is fixed in versions 4.1.137.Final and 4.2.17.Final."}]},{"artifact":{"id":"04618ccc073bdeef","cpes":["cpe:2.3:a:org.sonatype.buildsupport:ognl:3.4.4:*:*:*:*:*:*:*","cpe:2.3:a:buildsupport:ognl:3.4.4:*:*:*:*:*:*:*","cpe:2.3:a:sonatype:ognl:3.4.4:*:*:*:*:*:*:*","cpe:2.3:a:ognl:ognl:3.4.4:*:*:*:*:*:*:*"],"name":"ognl","purl":"pkg:maven/ognl/ognl@3.4.4","type":"java-archive","version":"3.4.4","language":"java","licenses":["The Apache Software License, Version 2.0"],"metadata":{"pomGroupID":"ognl","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/mybatis-3.5.19.jar:ognl:ognl","manifestName":"","pomArtifactID":"ognl","archiveDigests":null},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/mybatis-3.5.19.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.4.13"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-crwc-vw2r-qr6m","versionConstraint":"<=3.4.12 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"ognl:ognl","version":"3.4.4"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-crwc-vw2r-qr6m","fix":{"state":"fixed","versions":["3.4.13"],"available":[{"date":"2026-10-22","kind":"first-observed","version":"3.4.13"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.6,"impactScore":3.4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N","metrics":{"baseScore":6.3},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113730","cwe":"CWE-693","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-113730","date":"2026-11-12","epss":0.00394,"percentile":0.34117}],"risk":0.215715,"urls":["https://github.com/orphan-oss/ognl/security/advisories/GHSA-crwc-vw2r-qr6m","https://nvd.nist.gov/vuln/detail/CVE-2026-113730","https://github.com/orphan-oss/ognl/commit/16396fa4b560221294c2ab9ca04b76b161115e7d","https://github.com/orphan-oss/ognl/commit/f4c17f794754d516ea799c36ed8524d1b7fb98e2","https://github.com/orphan-oss/ognl/releases/tag/OGNL_3_4_13"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-crwc-vw2r-qr6m","description":"OGNL stricter-invocation block list bypass via java.lang.reflect reflection proxies"},"relatedVulnerabilities":[{"id":"CVE-2026-113730","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","metrics":{"baseScore":5.6,"impactScore":3.4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-113730","cwe":"CWE-693","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-113730","date":"2026-11-12","epss":0.00394,"percentile":0.34117}],"urls":["https://github.com/orphan-oss/ognl/commit/16396fa4b560221294c2ab9ca04b76b161115e7d","https://github.com/orphan-oss/ognl/commit/f4c17f794754d516ea799c36ed8524d1b7fb98e2","https://github.com/orphan-oss/ognl/releases/tag/OGNL_3_4_13","https://github.com/orphan-oss/ognl/security/advisories/GHSA-crwc-vw2r-qr6m"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-113730","description":"OGNL is an Object Graph Navigation Library for Java. Prior to 3.4.13, the optional stricter-invocation mode in OgnlRuntime.invokeMethod checks the declaring class of the method that OGNL invokes but does not block java.lang.reflect.Method, java.lang.reflect.Constructor, or java.lang.reflect.Field. An attacker-controlled expression can invoke one of these reflection objects as a proxy for a method on a blocked class, causing the real operation to execute inside JDK reflection without passing through the stricter-invocation check again. Exploitation requires an application to evaluate untrusted OGNL expressions, use the default or an equivalently permissive MemberAccess that permits reflection, and rely on stricter invocation as a sandbox. Applications using a restrictive MemberAccess, including Apache Struts with SecurityMemberAccess, are not affected by this bypass. This issue is fixed in 3.4.13."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91418","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91418","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91418","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-12","epss":0.00403,"percentile":0.35012}],"risk":0.207545,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91418"},"relatedVulnerabilities":[{"id":"CVE-2026-91418","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-12","epss":0.00403,"percentile":0.35012}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91418","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle JavaFX: 21.0.12, 25.0.4, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91418","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91418","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-12","epss":0.00403,"percentile":0.35012}],"risk":0.207545,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91418"},"relatedVulnerabilities":[{"id":"CVE-2026-91418","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-12","epss":0.00403,"percentile":0.35012}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91418","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle JavaFX: 21.0.12, 25.0.4, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91418","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91418","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-12","epss":0.00403,"percentile":0.35012}],"risk":0.207545,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91418"},"relatedVulnerabilities":[{"id":"CVE-2026-91418","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-12","epss":0.00403,"percentile":0.35012}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91418","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle JavaFX: 21.0.12, 25.0.4, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91418","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91418","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-12","epss":0.00403,"percentile":0.35012}],"risk":0.207545,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91418"},"relatedVulnerabilities":[{"id":"CVE-2026-91418","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-12","epss":0.00403,"percentile":0.35012}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91418","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle JavaFX: 21.0.12, 25.0.4, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91418","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91418","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-12","epss":0.00403,"percentile":0.35012}],"risk":0.207545,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91418"},"relatedVulnerabilities":[{"id":"CVE-2026-91418","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-12","epss":0.00403,"percentile":0.35012}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91418","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle JavaFX: 21.0.12, 25.0.4, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91418","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91418","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-12","epss":0.00403,"percentile":0.35012}],"risk":0.207545,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91418"},"relatedVulnerabilities":[{"id":"CVE-2026-91418","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-12","epss":0.00403,"percentile":0.35012}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91418","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle JavaFX: 21.0.12, 25.0.4, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91418","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91418","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-12","epss":0.00403,"percentile":0.35012}],"risk":0.207545,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91418"},"relatedVulnerabilities":[{"id":"CVE-2026-91418","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91418","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91418","date":"2026-11-12","epss":0.00403,"percentile":0.35012}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91418","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle JavaFX: 21.0.12, 25.0.4, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"35b876881980f569","cpes":["cpe:2.3:a:apache:shiro-spring:1.13.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:shiro_spring:1.13.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:spring:1.13.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:shiro:1.13.0:*:*:*:*:*:*:*"],"name":"shiro-spring","purl":"pkg:maven/org.apache.shiro/shiro-spring@1.13.0","type":"java-archive","version":"1.13.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.apache.shiro","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/shiro-spring-1.13.0.jar","manifestName":"","pomArtifactID":"shiro-spring","archiveDigests":[{"value":"e9fc4c29045a67cf985ec9f0da3eac651f153624","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/shiro-spring-1.13.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.1.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-c244-p6m5-vqj6","versionConstraint":"<=2.0.6 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.shiro:shiro-spring","version":"1.13.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-c244-p6m5-vqj6","fix":{"state":"fixed","versions":["2.1.0"],"available":[{"date":"2026-03-04","kind":"first-observed","version":"2.1.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-23903","cwe":"CWE-289","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-23903","date":"2026-11-12","epss":0.00397,"percentile":0.34439}],"risk":0.204455,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-23903","https://lists.apache.org/thread/5jjf0hnjcol58z2m5y255c7scz1lnp8k","http://www.openwall.com/lists/oss-security/2026/02/08/1","https://github.com/apache/shiro/commit/3b9638b957495004599aeaf24ba8949e309f26e8"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-c244-p6m5-vqj6","description":"Apache Shiro has an Authentication Bypass"},"relatedVulnerabilities":[{"id":"CVE-2026-23903","cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-23903","cwe":"CWE-289","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-23903","date":"2026-11-12","epss":0.00397,"percentile":0.34439}],"urls":["https://lists.apache.org/thread/5jjf0hnjcol58z2m5y255c7scz1lnp8k","http://www.openwall.com/lists/oss-security/2026/02/08/1"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-23903","description":"Authentication Bypass by Alternate Name vulnerability in Apache Shiro.\n\nThis issue affects Apache Shiro: before 2.0.7.\n\nUsers are recommended to upgrade to version 2.0.7, which fixes the issue.\n\nThe issue only effects static files. If static files are served from a case-insensitive filesystem,\nsuch as default macOS setup, static files may be accessed by varying the case of the filename in the request.\nIf only lower-case (common default) filters are present in Shiro, they may be bypassed this way.\n\nShiro 2.1.0 and later has a new parameters to remediate this issue\nshiro.ini: filterChainResolver.caseInsensitive = true\napplication.properties: shiro.caseInsensitive=true\n\nShiro 3.0.0 and later makes this the default in shiro.ini-based configurations.\nShiro 3.0.1 and later makes this the default in all configurations, including programmatic and Spring / Spring Boot."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-83400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83400","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-12","epss":0.00396,"percentile":0.34299}],"risk":0.20394,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83400"},"relatedVulnerabilities":[{"id":"CVE-2026-83400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-12","epss":0.00396,"percentile":0.34299}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83400","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-12","epss":0.00396,"percentile":0.34299}],"risk":0.20394,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83400"},"relatedVulnerabilities":[{"id":"CVE-2026-83400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-12","epss":0.00396,"percentile":0.34299}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83400","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-12","epss":0.00396,"percentile":0.34299}],"risk":0.20394,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83400"},"relatedVulnerabilities":[{"id":"CVE-2026-83400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-12","epss":0.00396,"percentile":0.34299}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83400","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-12","epss":0.00396,"percentile":0.34299}],"risk":0.20394,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83400"},"relatedVulnerabilities":[{"id":"CVE-2026-83400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-12","epss":0.00396,"percentile":0.34299}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83400","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-12","epss":0.00396,"percentile":0.34299}],"risk":0.20394,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83400"},"relatedVulnerabilities":[{"id":"CVE-2026-83400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-12","epss":0.00396,"percentile":0.34299}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83400","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-12","epss":0.00396,"percentile":0.34299}],"risk":0.20394,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83400"},"relatedVulnerabilities":[{"id":"CVE-2026-83400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-12","epss":0.00396,"percentile":0.34299}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83400","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-12","epss":0.00396,"percentile":0.34299}],"risk":0.20394,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83400"},"relatedVulnerabilities":[{"id":"CVE-2026-83400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83400","date":"2026-11-12","epss":0.00396,"percentile":0.34299}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"38371f85f698b6df","cpes":["cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.22.0:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.0","type":"java-archive","version":"2.22.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-2.22.0.jar","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":[{"value":"7aa54fc3755a9285eec2e73053bde1b9b845a9b2","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-2.22.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.22.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-5gvw-p9qm-jgwh","versionConstraint":">=2.22.0,<2.22.1 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.22.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-5gvw-p9qm-jgwh","fix":{"state":"fixed","versions":["2.22.1"],"available":[{"date":"2026-07-22","kind":"first-observed","version":"2.22.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59889","cwe":"CWE-863","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59889","date":"2026-11-12","epss":0.00346,"percentile":0.28573}],"risk":0.19895,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5gvw-p9qm-jgwh","https://nvd.nist.gov/vuln/detail/CVE-2026-59889","https://github.com/FasterXML/jackson-databind/issues/6060","https://github.com/FasterXML/jackson-databind/pull/6056","https://github.com/FasterXML/jackson-databind/commit/d627a8a86fcb062429282f79f3f256f181ed2c7b"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-5gvw-p9qm-jgwh","description":"jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization"},"relatedVulnerabilities":[{"id":"CVE-2026-59889","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59889","cwe":"CWE-863","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59889","date":"2026-11-12","epss":0.00346,"percentile":0.28573}],"urls":["https://github.com/FasterXML/jackson-databind/commit/d627a8a86fcb062429282f79f3f256f181ed2c7b","https://github.com/FasterXML/jackson-databind/issues/6060","https://github.com/FasterXML/jackson-databind/pull/6056","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5gvw-p9qm-jgwh"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59889","description":"jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.18.0 until 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1, UnwrappedPropertyHandler.processUnwrapped() replays buffered JSON for a @JsonUnwrapped property and calls prop.deserializeAndSet() without a prop.visibleInView(ctxt.getActiveView()) guard, allowing a property annotated with both @JsonView and @JsonUnwrapped to be written from attacker JSON under a less-privileged active view. This issue is fixed in versions 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1."}]},{"artifact":{"id":"90a279e83dd2fa78","cpes":["cpe:2.3:a:jackson-databind:jackson-databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:3.2.0:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/tools.jackson.core/jackson-databind@3.2.0","type":"java-archive","version":"3.2.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"tools.jackson.core","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-3.2.0.jar","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":[{"value":"45c1083a04086e6b7a0d008ac6c56655567690d0","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-3.2.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.2.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-5gvw-p9qm-jgwh","versionConstraint":">=3.2.0,<3.2.1 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"tools.jackson.core:jackson-databind","version":"3.2.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-5gvw-p9qm-jgwh","fix":{"state":"fixed","versions":["3.2.1"],"available":[{"date":"2026-07-22","kind":"first-observed","version":"3.2.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59889","cwe":"CWE-863","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59889","date":"2026-11-12","epss":0.00346,"percentile":0.28573}],"risk":0.19895,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5gvw-p9qm-jgwh","https://nvd.nist.gov/vuln/detail/CVE-2026-59889","https://github.com/FasterXML/jackson-databind/issues/6060","https://github.com/FasterXML/jackson-databind/pull/6056","https://github.com/FasterXML/jackson-databind/commit/d627a8a86fcb062429282f79f3f256f181ed2c7b"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-5gvw-p9qm-jgwh","description":"jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization"},"relatedVulnerabilities":[{"id":"CVE-2026-59889","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59889","cwe":"CWE-863","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59889","date":"2026-11-12","epss":0.00346,"percentile":0.28573}],"urls":["https://github.com/FasterXML/jackson-databind/commit/d627a8a86fcb062429282f79f3f256f181ed2c7b","https://github.com/FasterXML/jackson-databind/issues/6060","https://github.com/FasterXML/jackson-databind/pull/6056","https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-5gvw-p9qm-jgwh"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59889","description":"jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.18.0 until 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1, UnwrappedPropertyHandler.processUnwrapped() replays buffered JSON for a @JsonUnwrapped property and calls prop.deserializeAndSet() without a prop.visibleInView(ctxt.getActiveView()) guard, allowing a property annotated with both @JsonView and @JsonUnwrapped to be written from attacker JSON under a less-privileged active view. This issue is fixed in versions 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-46470","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-46470","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-46470","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46470","cwe":"CWE-369","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-46470","date":"2026-11-12","epss":0.00208,"percentile":0.11082}],"risk":0.18824,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-46470"},"relatedVulnerabilities":[{"id":"CVE-2026-46470","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":4,"impactScore":1.5,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46470","cwe":"CWE-369","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-46470","date":"2026-11-12","epss":0.00208,"percentile":0.11082}],"urls":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11243.patch","https://gstreamer.freedesktop.org/security/sa-2026-0018.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-46470","description":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-46470","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-46470","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46470","cwe":"CWE-369","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-46470","date":"2026-11-12","epss":0.00208,"percentile":0.11082}],"risk":0.18824,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-46470"},"relatedVulnerabilities":[{"id":"CVE-2026-46470","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":4,"impactScore":1.5,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46470","cwe":"CWE-369","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-46470","date":"2026-11-12","epss":0.00208,"percentile":0.11082}],"urls":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11243.patch","https://gstreamer.freedesktop.org/security/sa-2026-0018.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-46470","description":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-46470","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-46470","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46470","cwe":"CWE-369","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-46470","date":"2026-11-12","epss":0.00208,"percentile":0.11082}],"risk":0.18824,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-46470"},"relatedVulnerabilities":[{"id":"CVE-2026-46470","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":4,"impactScore":1.5,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46470","cwe":"CWE-369","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-46470","date":"2026-11-12","epss":0.00208,"percentile":0.11082}],"urls":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11243.patch","https://gstreamer.freedesktop.org/security/sa-2026-0018.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-46470","description":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-46470","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-46470","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46470","cwe":"CWE-369","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-46470","date":"2026-11-12","epss":0.00208,"percentile":0.11082}],"risk":0.18824,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-46470"},"relatedVulnerabilities":[{"id":"CVE-2026-46470","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":4,"impactScore":1.5,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46470","cwe":"CWE-369","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-46470","date":"2026-11-12","epss":0.00208,"percentile":0.11082}],"urls":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11243.patch","https://gstreamer.freedesktop.org/security/sa-2026-0018.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-46470","description":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-46470","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-46470","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46470","cwe":"CWE-369","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-46470","date":"2026-11-12","epss":0.00208,"percentile":0.11082}],"risk":0.18824,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-46470"},"relatedVulnerabilities":[{"id":"CVE-2026-46470","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":4,"impactScore":1.5,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46470","cwe":"CWE-369","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-46470","date":"2026-11-12","epss":0.00208,"percentile":0.11082}],"urls":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11243.patch","https://gstreamer.freedesktop.org/security/sa-2026-0018.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-46470","description":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-46470","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-46470","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46470","cwe":"CWE-369","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-46470","date":"2026-11-12","epss":0.00208,"percentile":0.11082}],"risk":0.18824,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-46470"},"relatedVulnerabilities":[{"id":"CVE-2026-46470","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":4,"impactScore":1.5,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46470","cwe":"CWE-369","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-46470","date":"2026-11-12","epss":0.00208,"percentile":0.11082}],"urls":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11243.patch","https://gstreamer.freedesktop.org/security/sa-2026-0018.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-46470","description":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-46470","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-46470","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46470","cwe":"CWE-369","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-46470","date":"2026-11-12","epss":0.00208,"percentile":0.11082}],"risk":0.18824,"urls":[],"severity":"Critical","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-46470"},"relatedVulnerabilities":[{"id":"CVE-2026-46470","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","metrics":{"baseScore":9.1,"impactScore":5.2,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"cve@mitre.org","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":4,"impactScore":1.5,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-46470","cwe":"CWE-369","type":"Secondary","source":"cve@mitre.org"}],"epss":[{"cve":"CVE-2026-46470","date":"2026-11-12","epss":0.00208,"percentile":0.11082}],"urls":["https://gitlab.freedesktop.org/gstreamer/gstreamer/-/merge_requests/11243.patch","https://gstreamer.freedesktop.org/security/sa-2026-0018.html"],"severity":"Critical","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-46470","description":"An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_audio_caps function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero."}]},{"artifact":{"id":"aa07c6d10e1ccaf1","cpes":["cpe:2.3:a:io.netty.codec-http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty.codec-http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec-http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec_http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-project:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_project:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty-codec:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty-codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:netty_codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty_codec:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec-http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec_http:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:io.netty:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:codec:codec_http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:codec-http:4.2.15.Final:*:*:*:*:*:*:*","cpe:2.3:a:netty:codec_http:4.2.15.Final:*:*:*:*:*:*:*"],"name":"netty-codec-http","purl":"pkg:maven/io.netty/netty-codec-http@4.2.15.Final","type":"java-archive","version":"4.2.15.Final","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0"],"metadata":{"pomGroupID":"io.netty","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-codec-http-4.2.15.Final.jar","manifestName":"","pomArtifactID":"netty-codec-http","archiveDigests":[{"value":"e611826aa054371bb9a17f27bdb05755a4cac5f0","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/netty-codec-http-4.2.15.Final.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"4.2.17.Final"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-8c42-7qj2-3j46","versionConstraint":">=4.2.0.Final,<=4.2.16.Final (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"io.netty:netty-codec-http","version":"4.2.15.Final"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-8c42-7qj2-3j46","fix":{"state":"fixed","versions":["4.2.17.Final"],"available":[{"date":"2026-08-18","kind":"first-observed","version":"4.2.17.Final"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59903","cwe":"CWE-524","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59903","date":"2026-11-12","epss":0.00324,"percentile":0.2575}],"risk":0.1863,"urls":["https://github.com/netty/netty/security/advisories/GHSA-8c42-7qj2-3j46","https://github.com/netty/netty/pull/17213","https://github.com/netty/netty/pull/17217","https://github.com/netty/netty/releases/tag/netty-4.1.137.Final","https://github.com/netty/netty/releases/tag/netty-4.2.17.Final"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-8c42-7qj2-3j46","description":"Netty Vulnerable to Cache Poisoning and Information Disclosure via CORS Vary Header Overwrite"},"relatedVulnerabilities":[{"id":"CVE-2026-59903","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":7.5,"impactScore":3.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":4.3,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-59903","cwe":"CWE-524","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-59903","date":"2026-11-12","epss":0.00324,"percentile":0.2575}],"urls":["https://github.com/netty/netty/pull/17213","https://github.com/netty/netty/pull/17217","https://github.com/netty/netty/releases/tag/netty-4.1.137.Final","https://github.com/netty/netty/releases/tag/netty-4.2.17.Final","https://github.com/netty/netty/security/advisories/GHSA-8c42-7qj2-3j46"],"severity":"High","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-59903","description":"Netty is an asynchronous, event-driven network application framework. Prior to 4.1.137.Final and 4.2.17.Final, io.netty.handler.codec.http.cors.CorsHandler setVaryHeader replaces application Vary headers such as Authorization or Cookie with Origin, allowing a caching proxy or CDN to reuse authenticated responses across users and disclose sensitive information. This issue is fixed in versions 4.1.137.Final and 4.2.17.Final."}]},{"artifact":{"id":"661e3ee1c2dec29c","cpes":["cpe:2.3:a:org.postgresql.osgi.PGBundleActivator:PGBundleActivator:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-global-development-group:PGBundleActivator:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_global_development_group:PGBundleActivator:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:org.postgresql.osgi.PGBundleActivator:postgresql:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-global-development-group:postgresql:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_global_development_group:postgresql:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:org.postgresql.osgi.PGBundleActivator:jdbc:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:org.postgresql.osgi.PGBundleActivator:osgi:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-global-development-group:jdbc:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:postgresql-global-development-group:osgi:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_global_development_group:jdbc:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:postgresql_global_development_group:osgi:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:org.postgresql.jdbc:PGBundleActivator:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:oracle-corporation:PGBundleActivator:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:oracle_corporation:PGBundleActivator:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:PGBundleActivator:PGBundleActivator:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:org.postgresql:PGBundleActivator:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:org.postgresql.jdbc:postgresql:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:oracle-corporation:postgresql:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:oracle_corporation:postgresql:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:PGBundleActivator:postgresql:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:PGBundleActivator:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:org.postgresql:postgresql:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:org.postgresql.jdbc:jdbc:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:org.postgresql.jdbc:osgi:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:oracle-corporation:jdbc:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:oracle-corporation:osgi:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:oracle_corporation:jdbc:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:oracle_corporation:osgi:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:PGBundleActivator:jdbc:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:PGBundleActivator:osgi:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:jdbc:PGBundleActivator:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:osgi:PGBundleActivator:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:postgresql:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:org.postgresql:jdbc:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:org.postgresql:osgi:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:jdbc:postgresql:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:osgi:postgresql:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:jdbc:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:postgresql:osgi:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:jdbc:jdbc:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:jdbc:osgi:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:osgi:jdbc:42.7.11:*:*:*:*:*:*:*","cpe:2.3:a:osgi:osgi:42.7.11:*:*:*:*:*:*:*"],"name":"postgresql","purl":"pkg:maven/org.postgresql/postgresql@42.7.11","type":"java-archive","version":"42.7.11","language":"java","licenses":["BSD-2-Clause"],"metadata":{"pomGroupID":"org.postgresql","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/postgresql-42.7.11.jar","manifestName":"","pomArtifactID":"postgresql","archiveDigests":[{"value":"4c21cdd1b3938f400703716d37c4e8ca4d332808","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/postgresql-42.7.11.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"42.7.12"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-j92g-9f8w-j867","versionConstraint":">=42.7.4,<42.7.12 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.postgresql:postgresql","version":"42.7.11"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-j92g-9f8w-j867","fix":{"state":"fixed","versions":["42.7.12"],"available":[{"date":"2026-07-22","kind":"first-observed","version":"42.7.12"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54291","cwe":"CWE-636","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-54291","cwe":"CWE-757","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-54291","date":"2026-11-12","epss":0.00236,"percentile":0.14774}],"risk":0.18525999999999998,"urls":["https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-j92g-9f8w-j867","https://nvd.nist.gov/vuln/detail/CVE-2026-54291","https://github.com/pgjdbc/pgjdbc/commit/77df98e4e66c12936ded3478a0954f6f580bad99","https://github.com/ongres/scram/releases/tag/3.3"],"severity":"High","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-j92g-9f8w-j867","description":"PostgreSQL JDBC Driver: Silent channel-binding authentication downgrade via unsupported certificate algorithms"},"relatedVulnerabilities":[{"id":"CVE-2026-54291","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":8.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-54291","cwe":"CWE-636","type":"Secondary","source":"security-advisories@github.com"},{"cve":"CVE-2026-54291","cwe":"CWE-757","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-54291","date":"2026-11-12","epss":0.00236,"percentile":0.14774}],"urls":["https://github.com/ongres/scram/releases/tag/3.3","https://github.com/pgjdbc/pgjdbc/commit/77df98e4e66c12936ded3478a0954f6f580bad99","https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-j92g-9f8w-j867"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-54291","description":"pgjdbc is an open source postgresql JDBC Driver. In releases 42.7.4 through 42.7.11, channelBinding=require connections can be silently downgraded from SCRAM-SHA-256-PLUS with channel binding to plain SCRAM-SHA-256 without it, losing the man-in-the-middle protection the setting is meant to guarantee. An attacker who can intercept the TLS connection can trigger the downgrade with a certificate whose signature algorithm has no tls-server-end-point channel-binding hash, because the bundled com.ongres.scram:scram-client returns an empty byte array instead of failing and pgJDBC ScramAuthenticator checks only that the server advertised a PLUS mechanism, without rejecting the empty binding or checking that the negotiated mechanism uses channel binding. This issue is fixed in version 42.7.12."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-61308","versionConstraint":"< 1.8.0_504||>= 1.9, < 8.0.504||>= 12, < 17.0.20.1||>= 18, < 21.0.12.1||>= 22, < 25.0.4.1||>= 26, < 26.0.2.1||>= 9, < 11.0.32.1 (jvm)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:oracle:openjdk:21.0.12_p8:*:*:*:*:*:*:*"],"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-61308","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","metrics":{"baseScore":6.8,"impactScore":4,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-61308","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-61308","date":"2026-11-12","epss":0.0031,"percentile":0.24159}],"risk":0.18289999999999998,"urls":["https://www.oracle.com/security-alerts/cspuaug2026.html","https://openjdk.org/groups/vulnerability/advisories/2026-08-18"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-61308","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and  21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  While the vulnerability is in Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products (scope change).  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 6.8 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N)."},"relatedVulnerabilities":[]},{"artifact":{"id":"fef07e9c95ea2bda","cpes":["cpe:2.3:a:busybox:busybox:1.37.0-r31:*:*:*:*:*:*:*"],"name":"busybox","purl":"pkg:apk/alpine/busybox@1.37.0-r31?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.37.0-r31","language":"","licenses":["GPL-2.0-only"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/busybox"},{"path":"/etc"},{"path":"/etc/securetty"},{"path":"/etc/busybox-paths.d"},{"path":"/etc/busybox-paths.d/busybox"},{"path":"/etc/logrotate.d"},{"path":"/etc/logrotate.d/acpid"},{"path":"/etc/network"},{"path":"/etc/network/if-down.d"},{"path":"/etc/network/if-post-down.d"},{"path":"/etc/network/if-post-up.d"},{"path":"/etc/network/if-pre-down.d"},{"path":"/etc/network/if-pre-up.d"},{"path":"/etc/network/if-up.d"},{"path":"/etc/network/if-up.d/dad"},{"path":"/etc/udhcpc"},{"path":"/etc/udhcpc/udhcpc.conf"},{"path":"/sbin"},{"path":"/usr"},{"path":"/usr/sbin"},{"path":"/usr/share"},{"path":"/usr/share/udhcpc"},{"path":"/usr/share/udhcpc/default.script"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.37.0-r31"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-60876","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-60876","date":"2026-11-12","epss":0.00312,"percentile":0.24431}],"risk":0.17939999999999998,"urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20)."},"relatedVulnerabilities":[]},{"artifact":{"id":"915155597fcdee9a","cpes":["cpe:2.3:a:busybox-binsh:busybox-binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox-binsh:busybox_binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox_binsh:busybox-binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox_binsh:busybox_binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox:busybox-binsh:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:busybox:busybox_binsh:1.37.0-r31:*:*:*:*:*:*:*"],"name":"busybox-binsh","purl":"pkg:apk/alpine/busybox-binsh@1.37.0-r31?arch=x86_64&distro=alpine-3.24.3&upstream=busybox","type":"apk","version":"1.37.0-r31","language":"","licenses":["GPL-2.0-only"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/sh"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.37.0-r31"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-60876","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-60876","date":"2026-11-12","epss":0.00312,"percentile":0.24431}],"risk":0.17939999999999998,"urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20)."},"relatedVulnerabilities":[]},{"artifact":{"id":"8a9ef44e1018f213","cpes":["cpe:2.3:a:ssl-client:ssl-client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl-client:ssl_client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl_client:ssl-client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl_client:ssl_client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl:ssl-client:1.37.0-r31:*:*:*:*:*:*:*","cpe:2.3:a:ssl:ssl_client:1.37.0-r31:*:*:*:*:*:*:*"],"name":"ssl_client","purl":"pkg:apk/alpine/ssl_client@1.37.0-r31?arch=x86_64&distro=alpine-3.24.3&upstream=busybox","type":"apk","version":"1.37.0-r31","language":"","licenses":["GPL-2.0-only"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/ssl_client"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"busybox"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2025-60876","versionConstraint":"<= 1.37.0 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:busybox:busybox:1.37.0:*:*:*:*:*:*:*"],"package":{"name":"busybox","version":"1.37.0-r31"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2025-60876","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":6.5,"impactScore":2.6,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2025-60876","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2025-60876","date":"2026-11-12","epss":0.00312,"percentile":0.24431}],"risk":0.17939999999999998,"urls":["https://gist.github.com/subyumatest/41554af6a72aedaacaec026adc311092","https://lists.busybox.net/pipermail/busybox/attachments/20250823/ccdc96ef/attachment-0001.htm","https://lists.busybox.net/pipermail/busybox/attachments/20250828/e7f90492/attachment.htm","https://cert-portal.siemens.com/productcert/html/ssa-253495.html"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2025-60876","description":"BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers to be injected. To preserve the HTTP/1.1 request-line shape METHOD SP request-target SP HTTP/1.1, a raw space (0x20) in the request-target must also be rejected (clients should use %20)."},"relatedVulnerabilities":[]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-83387","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83387","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83387","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"risk":0.178215,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83387"},"relatedVulnerabilities":[{"id":"CVE-2026-83387","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83387","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDBC).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-87290","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87290","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87290","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"risk":0.178215,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87290"},"relatedVulnerabilities":[{"id":"CVE-2026-87290","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87290","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83387","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83387","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"risk":0.178215,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83387"},"relatedVulnerabilities":[{"id":"CVE-2026-83387","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83387","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDBC).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87290","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87290","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"risk":0.178215,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87290"},"relatedVulnerabilities":[{"id":"CVE-2026-87290","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87290","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83387","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83387","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"risk":0.178215,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83387"},"relatedVulnerabilities":[{"id":"CVE-2026-83387","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83387","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDBC).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87290","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87290","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"risk":0.178215,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87290"},"relatedVulnerabilities":[{"id":"CVE-2026-87290","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87290","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83387","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83387","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"risk":0.178215,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83387"},"relatedVulnerabilities":[{"id":"CVE-2026-83387","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83387","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDBC).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87290","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87290","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"risk":0.178215,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87290"},"relatedVulnerabilities":[{"id":"CVE-2026-87290","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87290","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83387","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83387","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"risk":0.178215,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83387"},"relatedVulnerabilities":[{"id":"CVE-2026-83387","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83387","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDBC).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87290","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87290","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"risk":0.178215,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87290"},"relatedVulnerabilities":[{"id":"CVE-2026-87290","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87290","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83387","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83387","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"risk":0.178215,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83387"},"relatedVulnerabilities":[{"id":"CVE-2026-83387","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83387","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDBC).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87290","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87290","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"risk":0.178215,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87290"},"relatedVulnerabilities":[{"id":"CVE-2026-87290","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87290","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83387","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83387","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"risk":0.178215,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83387"},"relatedVulnerabilities":[{"id":"CVE-2026-83387","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83387","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83387","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83387","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDBC).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87290","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87290","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"risk":0.178215,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87290"},"relatedVulnerabilities":[{"id":"CVE-2026-87290","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87290","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87290","date":"2026-11-12","epss":0.00327,"percentile":0.26159}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87290","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"cc948e62b0bc4bb0","cpes":["cpe:2.3:a:org.eclipse.jetty.util:jetty-util:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty.util:jetty_util:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:eclipse-jetty-project:jetty-util:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:eclipse-jetty-project:jetty_util:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:eclipse_jetty_project:jetty-util:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:eclipse_jetty_project:jetty_util:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty.util:jetty:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty:jetty-util:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty:jetty_util:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:eclipse-jetty-project:jetty:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:eclipse_jetty_project:jetty:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty.util:util:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:eclipse-jetty-project:util:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:eclipse_jetty_project:util:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty:jetty:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:org.eclipse.jetty:util:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty-util:jetty-util:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty-util:jetty_util:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty_util:jetty-util:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty_util:jetty_util:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jetty-util:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jetty_util:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty-util:jetty:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty:jetty-util:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty:jetty_util:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty_util:jetty:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty-util:util:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty_util:util:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:util:jetty-util:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:util:jetty_util:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:jetty:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:eclipse:util:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty:jetty:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:jetty:util:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:util:jetty:12.0.33:*:*:*:*:*:*:*","cpe:2.3:a:util:util:12.0.33:*:*:*:*:*:*:*"],"name":"jetty-util","purl":"pkg:maven/org.eclipse.jetty/jetty-util@12.0.33","type":"java-archive","version":"12.0.33","language":"java","licenses":["https://www.eclipse.org/legal/epl-2.0/, https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.eclipse.jetty","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jetty-util-12.0.33.jar","manifestName":"","pomArtifactID":"jetty-util","archiveDigests":[{"value":"9ff0e88aca4dd2247217c0cb68ced168fd8a729b","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jetty-util-12.0.33.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"12.0.35"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-w7x5-g22v-xqhr","versionConstraint":">=12.0.0,<=12.0.34 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.eclipse.jetty:jetty-util","version":"12.0.33"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-w7x5-g22v-xqhr","fix":{"state":"fixed","versions":["12.0.35"],"available":[{"date":"2026-07-23","kind":"first-observed","version":"12.0.35"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8384","cwe":"CWE-647","type":"Secondary","source":"emo@eclipse.org"}],"epss":[{"cve":"CVE-2026-8384","date":"2026-11-12","epss":0.0033,"percentile":0.26538}],"risk":0.16995000000000002,"urls":["https://github.com/jetty/jetty.project/security/advisories/GHSA-w7x5-g22v-xqhr","https://nvd.nist.gov/vuln/detail/CVE-2026-8384","https://github.com/jetty/jetty.project/pull/14969","https://github.com/jetty/jetty.project/pull/14973","https://github.com/jetty/jetty.project/commit/82969c77f6da46e27008b10b3c14840cd31db084","https://github.com/jetty/jetty.project/commit/ade27ce93a37c33278720250d85c48601230ae3f","https://github.com/jetty/jetty.project/releases/tag/jetty-12.0.35","https://github.com/jetty/jetty.project/releases/tag/jetty-12.1.9","https://gitlab.eclipse.org/security/cve-assignment/-/work_items/108"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-w7x5-g22v-xqhr","description":"Eclipse Jetty: Path parameter traversal"},"relatedVulnerabilities":[{"id":"CVE-2026-8384","cvss":[{"type":"Secondary","source":"emo@eclipse.org","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-8384","cwe":"CWE-647","type":"Secondary","source":"emo@eclipse.org"}],"epss":[{"cve":"CVE-2026-8384","date":"2026-11-12","epss":0.0033,"percentile":0.26538}],"urls":["https://gitlab.eclipse.org/security/cve-assignment/-/work_items/108"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-8384","description":"In Eclipse Jetty, an HTTP URI of this form:\n\n\n\n\n\n/public;/../admin/secret.txt\n\n\n\n\n\n\n\n\nresults in an unresolved path of:\n\n\n\n\n\n/public/../admin/secret.txt\n\n\n\n\n\n\n\n\ninstead of the expected:\n\n\n\n\n\n/admin/secret.txt\n\n\n\n\n\n\n\n\nJetty itself is not affected, as it will not serve the secret.txt file because it will not pass the alias checker (only resolved resources are served).\n\n\n\n\nHowever, web applications that rely on resolved paths being provided by Jetty may be confused when receiving an unresolved path."}]},{"artifact":{"id":"38371f85f698b6df","cpes":["cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core.jackson-databind:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson.core:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:com.fasterxml.jackson:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson-databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson_databind:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson:2.22.0:*:*:*:*:*:*:*","cpe:2.3:a:core:jackson:2.22.0:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.22.0","type":"java-archive","version":"2.22.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"com.fasterxml.jackson.core","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-2.22.0.jar","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":[{"value":"7aa54fc3755a9285eec2e73053bde1b9b845a9b2","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-2.22.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.22.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-vvgp-rfg2-7rr6","versionConstraint":">=2.22.0,<2.22.1 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"com.fasterxml.jackson.core:jackson-databind","version":"2.22.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-vvgp-rfg2-7rr6","fix":{"state":"fixed","versions":["2.22.1"],"available":[{"date":"2026-09-29","kind":"first-observed","version":"2.22.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77310","cwe":"CWE-918","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-77310","date":"2026-11-12","epss":0.00313,"percentile":0.24508}],"risk":0.161195,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-vvgp-rfg2-7rr6","https://nvd.nist.gov/vuln/detail/CVE-2026-77310","https://github.com/FasterXML/jackson-databind/pull/6058","https://github.com/FasterXML/jackson-databind/commit/2fc7bd9057dd051d7dea0e5fcad89822d0fa5ebd","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.9","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.5","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.1","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.5","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.1"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-vvgp-rfg2-7rr6","description":"jackson-databind: Incomplete fix for CVE-2026-54514: eager DNS resolution (SSRF) still present in InetAddress deserialization"},"relatedVulnerabilities":[{"id":"CVE-2026-77310","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77310","cwe":"CWE-918","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-77310","date":"2026-11-12","epss":0.00313,"percentile":0.24508}],"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-vvgp-rfg2-7rr6"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-77310","description":"jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Prior to versions 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1 on their respective release lines, the java.net.InetAddress branch of FromStringDeserializer.Std._deserialize() calls InetAddress.getByName() on attacker-controlled input, causing eager DNS resolution during deserialization and enabling DNS-based server-side request forgery and internal-host enumeration. This issue is fixed in versions 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1."}]},{"artifact":{"id":"90a279e83dd2fa78","cpes":["cpe:2.3:a:jackson-databind:jackson-databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson-databind:jackson_databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson-databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson_databind:jackson_databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson-databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fasterxml:jackson_databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson-databind:3.2.0:*:*:*:*:*:*:*","cpe:2.3:a:jackson:jackson_databind:3.2.0:*:*:*:*:*:*:*"],"name":"jackson-databind","purl":"pkg:maven/tools.jackson.core/jackson-databind@3.2.0","type":"java-archive","version":"3.2.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"tools.jackson.core","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-3.2.0.jar","manifestName":"","pomArtifactID":"jackson-databind","archiveDigests":[{"value":"45c1083a04086e6b7a0d008ac6c56655567690d0","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jackson-databind-3.2.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.2.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-vvgp-rfg2-7rr6","versionConstraint":">=3.2.0,<3.2.1 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"tools.jackson.core:jackson-databind","version":"3.2.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-vvgp-rfg2-7rr6","fix":{"state":"fixed","versions":["3.2.1"],"available":[{"date":"2026-09-29","kind":"first-observed","version":"3.2.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77310","cwe":"CWE-918","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-77310","date":"2026-11-12","epss":0.00313,"percentile":0.24508}],"risk":0.161195,"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-vvgp-rfg2-7rr6","https://nvd.nist.gov/vuln/detail/CVE-2026-77310","https://github.com/FasterXML/jackson-databind/pull/6058","https://github.com/FasterXML/jackson-databind/commit/2fc7bd9057dd051d7dea0e5fcad89822d0fa5ebd","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.18.9","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.21.5","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-2.22.1","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.1.5","https://github.com/FasterXML/jackson-databind/releases/tag/jackson-databind-3.2.1"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-vvgp-rfg2-7rr6","description":"jackson-databind: Incomplete fix for CVE-2026-54514: eager DNS resolution (SSRF) still present in InetAddress deserialization"},"relatedVulnerabilities":[{"id":"CVE-2026-77310","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-77310","cwe":"CWE-918","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-77310","date":"2026-11-12","epss":0.00313,"percentile":0.24508}],"urls":["https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-vvgp-rfg2-7rr6"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-77310","description":"jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. Prior to versions 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1 on their respective release lines, the java.net.InetAddress branch of FromStringDeserializer.Std._deserialize() calls InetAddress.getByName() on attacker-controlled input, causing eager DNS resolution during deserialization and enabling DNS-based server-side request forgery and internal-host enumeration. This issue is fixed in versions 2.18.9, 2.21.5, 2.22.1, 3.1.5, and 3.2.1."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-87291","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87291","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87291","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-12","epss":0.00308,"percentile":0.23933}],"risk":0.15861999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87291"},"relatedVulnerabilities":[{"id":"CVE-2026-87291","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-12","epss":0.00308,"percentile":0.23933}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87291","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87291","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87291","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-12","epss":0.00308,"percentile":0.23933}],"risk":0.15861999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87291"},"relatedVulnerabilities":[{"id":"CVE-2026-87291","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-12","epss":0.00308,"percentile":0.23933}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87291","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87291","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87291","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-12","epss":0.00308,"percentile":0.23933}],"risk":0.15861999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87291"},"relatedVulnerabilities":[{"id":"CVE-2026-87291","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-12","epss":0.00308,"percentile":0.23933}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87291","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87291","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87291","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-12","epss":0.00308,"percentile":0.23933}],"risk":0.15861999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87291"},"relatedVulnerabilities":[{"id":"CVE-2026-87291","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-12","epss":0.00308,"percentile":0.23933}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87291","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87291","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87291","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-12","epss":0.00308,"percentile":0.23933}],"risk":0.15861999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87291"},"relatedVulnerabilities":[{"id":"CVE-2026-87291","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-12","epss":0.00308,"percentile":0.23933}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87291","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87291","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87291","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-12","epss":0.00308,"percentile":0.23933}],"risk":0.15861999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87291"},"relatedVulnerabilities":[{"id":"CVE-2026-87291","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-12","epss":0.00308,"percentile":0.23933}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87291","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87291","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87291","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-12","epss":0.00308,"percentile":0.23933}],"risk":0.15861999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87291"},"relatedVulnerabilities":[{"id":"CVE-2026-87291","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87291","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87291","date":"2026-11-12","epss":0.00308,"percentile":0.23933}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87291","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91417","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91417","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91417","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-12","epss":0.00306,"percentile":0.23736}],"risk":0.15758999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91417"},"relatedVulnerabilities":[{"id":"CVE-2026-91417","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-12","epss":0.00306,"percentile":0.23736}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91417","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91417","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91417","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-12","epss":0.00306,"percentile":0.23736}],"risk":0.15758999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91417"},"relatedVulnerabilities":[{"id":"CVE-2026-91417","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-12","epss":0.00306,"percentile":0.23736}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91417","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91417","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91417","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-12","epss":0.00306,"percentile":0.23736}],"risk":0.15758999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91417"},"relatedVulnerabilities":[{"id":"CVE-2026-91417","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-12","epss":0.00306,"percentile":0.23736}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91417","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91417","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91417","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-12","epss":0.00306,"percentile":0.23736}],"risk":0.15758999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91417"},"relatedVulnerabilities":[{"id":"CVE-2026-91417","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-12","epss":0.00306,"percentile":0.23736}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91417","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91417","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91417","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-12","epss":0.00306,"percentile":0.23736}],"risk":0.15758999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91417"},"relatedVulnerabilities":[{"id":"CVE-2026-91417","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-12","epss":0.00306,"percentile":0.23736}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91417","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91417","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91417","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-12","epss":0.00306,"percentile":0.23736}],"risk":0.15758999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91417"},"relatedVulnerabilities":[{"id":"CVE-2026-91417","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-12","epss":0.00306,"percentile":0.23736}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91417","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91417","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91417","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-12","epss":0.00306,"percentile":0.23736}],"risk":0.15758999999999998,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91417"},"relatedVulnerabilities":[{"id":"CVE-2026-91417","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91417","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91417","date":"2026-11-12","epss":0.00306,"percentile":0.23736}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91417","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-83374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83374","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-12","epss":0.00289,"percentile":0.21705}],"risk":0.157505,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83374"},"relatedVulnerabilities":[{"id":"CVE-2026-83374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-12","epss":0.00289,"percentile":0.21705}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83374","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-12","epss":0.00289,"percentile":0.21705}],"risk":0.157505,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83374"},"relatedVulnerabilities":[{"id":"CVE-2026-83374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-12","epss":0.00289,"percentile":0.21705}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83374","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-12","epss":0.00289,"percentile":0.21705}],"risk":0.157505,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83374"},"relatedVulnerabilities":[{"id":"CVE-2026-83374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-12","epss":0.00289,"percentile":0.21705}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83374","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-12","epss":0.00289,"percentile":0.21705}],"risk":0.157505,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83374"},"relatedVulnerabilities":[{"id":"CVE-2026-83374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-12","epss":0.00289,"percentile":0.21705}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83374","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-12","epss":0.00289,"percentile":0.21705}],"risk":0.157505,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83374"},"relatedVulnerabilities":[{"id":"CVE-2026-83374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-12","epss":0.00289,"percentile":0.21705}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83374","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-12","epss":0.00289,"percentile":0.21705}],"risk":0.157505,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83374"},"relatedVulnerabilities":[{"id":"CVE-2026-83374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-12","epss":0.00289,"percentile":0.21705}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83374","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-12","epss":0.00289,"percentile":0.21705}],"risk":0.157505,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83374"},"relatedVulnerabilities":[{"id":"CVE-2026-83374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83374","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83374","date":"2026-11-12","epss":0.00289,"percentile":0.21705}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91332","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91332","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91332","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91332"},"relatedVulnerabilities":[{"id":"CVE-2026-91332","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91332","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91453","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91453","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91453","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91453"},"relatedVulnerabilities":[{"id":"CVE-2026-91453","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91453","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91332","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91332","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91332"},"relatedVulnerabilities":[{"id":"CVE-2026-91332","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91332","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91453","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91453","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91453"},"relatedVulnerabilities":[{"id":"CVE-2026-91453","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91453","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91332","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91332","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91332"},"relatedVulnerabilities":[{"id":"CVE-2026-91332","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91332","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91453","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91453","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91453"},"relatedVulnerabilities":[{"id":"CVE-2026-91453","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91453","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91332","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91332","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91332"},"relatedVulnerabilities":[{"id":"CVE-2026-91332","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91332","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91453","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91453","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91453"},"relatedVulnerabilities":[{"id":"CVE-2026-91453","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91453","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91332","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91332","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91332"},"relatedVulnerabilities":[{"id":"CVE-2026-91332","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91332","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91453","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91453","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91453"},"relatedVulnerabilities":[{"id":"CVE-2026-91453","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91453","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91332","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91332","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91332"},"relatedVulnerabilities":[{"id":"CVE-2026-91332","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91332","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91453","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91453","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91453"},"relatedVulnerabilities":[{"id":"CVE-2026-91453","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91453","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91332","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91332","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91332"},"relatedVulnerabilities":[{"id":"CVE-2026-91332","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91332","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91332","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91332","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91453","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91453","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91453"},"relatedVulnerabilities":[{"id":"CVE-2026-91453","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91453","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91453","date":"2026-11-12","epss":0.0029,"percentile":0.21792}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91453","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91451","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91451","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91451","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91451"},"relatedVulnerabilities":[{"id":"CVE-2026-91451","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91451","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91452","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91452","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91452","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91452"},"relatedVulnerabilities":[{"id":"CVE-2026-91452","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91452","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91451","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91451","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91451"},"relatedVulnerabilities":[{"id":"CVE-2026-91451","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91451","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91452","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91452","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91452"},"relatedVulnerabilities":[{"id":"CVE-2026-91452","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91452","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91451","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91451","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91451"},"relatedVulnerabilities":[{"id":"CVE-2026-91451","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91451","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91452","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91452","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91452"},"relatedVulnerabilities":[{"id":"CVE-2026-91452","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91452","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91451","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91451","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91451"},"relatedVulnerabilities":[{"id":"CVE-2026-91451","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91451","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91452","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91452","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91452"},"relatedVulnerabilities":[{"id":"CVE-2026-91452","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91452","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91451","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91451","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91451"},"relatedVulnerabilities":[{"id":"CVE-2026-91451","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91451","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91452","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91452","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91452"},"relatedVulnerabilities":[{"id":"CVE-2026-91452","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91452","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91451","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91451","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91451"},"relatedVulnerabilities":[{"id":"CVE-2026-91451","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91451","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91452","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91452","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91452"},"relatedVulnerabilities":[{"id":"CVE-2026-91452","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91452","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91451","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91451","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91451"},"relatedVulnerabilities":[{"id":"CVE-2026-91451","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91451","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91451","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91451","description":"Vulnerability in Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91452","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91452","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"risk":0.14935,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91452"},"relatedVulnerabilities":[{"id":"CVE-2026-91452","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91452","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91452","date":"2026-11-12","epss":0.0029,"percentile":0.21791}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91452","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91462","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91462","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91462","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-12","epss":0.00274,"percentile":0.19987}],"risk":0.14933,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91462"},"relatedVulnerabilities":[{"id":"CVE-2026-91462","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-12","epss":0.00274,"percentile":0.19987}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91462","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91462","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91462","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-12","epss":0.00274,"percentile":0.19987}],"risk":0.14933,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91462"},"relatedVulnerabilities":[{"id":"CVE-2026-91462","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-12","epss":0.00274,"percentile":0.19987}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91462","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91462","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91462","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-12","epss":0.00274,"percentile":0.19987}],"risk":0.14933,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91462"},"relatedVulnerabilities":[{"id":"CVE-2026-91462","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-12","epss":0.00274,"percentile":0.19987}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91462","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91462","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91462","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-12","epss":0.00274,"percentile":0.19987}],"risk":0.14933,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91462"},"relatedVulnerabilities":[{"id":"CVE-2026-91462","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-12","epss":0.00274,"percentile":0.19987}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91462","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91462","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91462","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-12","epss":0.00274,"percentile":0.19987}],"risk":0.14933,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91462"},"relatedVulnerabilities":[{"id":"CVE-2026-91462","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-12","epss":0.00274,"percentile":0.19987}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91462","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91462","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91462","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-12","epss":0.00274,"percentile":0.19987}],"risk":0.14933,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91462"},"relatedVulnerabilities":[{"id":"CVE-2026-91462","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-12","epss":0.00274,"percentile":0.19987}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91462","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91462","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91462","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-12","epss":0.00274,"percentile":0.19987}],"risk":0.14933,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91462"},"relatedVulnerabilities":[{"id":"CVE-2026-91462","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","metrics":{"baseScore":5.9,"impactScore":3.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91462","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91462","date":"2026-11-12","epss":0.00274,"percentile":0.19987}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91462","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27;    Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1;   Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91464","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91464","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91464","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-12","epss":0.00289,"percentile":0.21785}],"risk":0.148835,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91464"},"relatedVulnerabilities":[{"id":"CVE-2026-91464","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-12","epss":0.00289,"percentile":0.21785}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91464","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91464","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91464","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-12","epss":0.00289,"percentile":0.21785}],"risk":0.148835,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91464"},"relatedVulnerabilities":[{"id":"CVE-2026-91464","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-12","epss":0.00289,"percentile":0.21785}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91464","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91464","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91464","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-12","epss":0.00289,"percentile":0.21785}],"risk":0.148835,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91464"},"relatedVulnerabilities":[{"id":"CVE-2026-91464","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-12","epss":0.00289,"percentile":0.21785}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91464","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91464","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91464","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-12","epss":0.00289,"percentile":0.21785}],"risk":0.148835,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91464"},"relatedVulnerabilities":[{"id":"CVE-2026-91464","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-12","epss":0.00289,"percentile":0.21785}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91464","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91464","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91464","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-12","epss":0.00289,"percentile":0.21785}],"risk":0.148835,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91464"},"relatedVulnerabilities":[{"id":"CVE-2026-91464","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-12","epss":0.00289,"percentile":0.21785}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91464","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91464","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91464","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-12","epss":0.00289,"percentile":0.21785}],"risk":0.148835,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91464"},"relatedVulnerabilities":[{"id":"CVE-2026-91464","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-12","epss":0.00289,"percentile":0.21785}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91464","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91464","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91464","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-12","epss":0.00289,"percentile":0.21785}],"risk":0.148835,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91464"},"relatedVulnerabilities":[{"id":"CVE-2026-91464","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91464","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91464","date":"2026-11-12","epss":0.00289,"percentile":0.21785}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91464","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"866a8444ac1e7113","cpes":["cpe:2.3:a:apache:shiro-web:1.13.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:shiro_web:1.13.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:shiro:1.13.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:web:1.13.0:*:*:*:*:*:*:*"],"name":"shiro-web","purl":"pkg:maven/org.apache.shiro/shiro-web@1.13.0","type":"java-archive","version":"1.13.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.apache.shiro","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/shiro-web-1.13.0.jar","manifestName":"","pomArtifactID":"shiro-web","archiveDigests":[{"value":"99a09dc19f37487639b5bab978953bc38963d6ea","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/shiro-web-1.13.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.2.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-c6r4-qjmw-cvj2","versionConstraint":">=1.0.0-incubating,<2.2.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.shiro:shiro-web","version":"1.13.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-c6r4-qjmw-cvj2","fix":{"state":"fixed","versions":["2.2.0"],"available":[{"date":"2026-07-01","kind":"first-observed","version":"2.2.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/RE:L/U:Amber","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-43828","cwe":"CWE-614","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-43828","date":"2026-11-12","epss":0.00272,"percentile":0.19803}],"risk":0.14824000000000004,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-43828","https://shiro.apache.org/security-reports.html#cve_2026_43828","http://www.openwall.com/lists/oss-security/2026/05/25/7"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-c6r4-qjmw-cvj2","description":"Apache Shiro sends sensitive cookies in HTTPS session without 'Secure' attribute"},"relatedVulnerabilities":[{"id":"CVE-2026-43828","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":6.5,"impactScore":3.6,"exploitabilityScore":2.9},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@apache.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:X/RE:L/U:Amber","metrics":{"baseScore":5.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-43828","cwe":"CWE-614","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-43828","date":"2026-11-12","epss":0.00272,"percentile":0.19803}],"urls":["https://shiro.apache.org/security-reports.html#cve_2026_43828","http://www.openwall.com/lists/oss-security/2026/05/25/7"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-43828","description":"Default configurations of Apache Shiro send sensitive cookies in HTTPS session without 'Secure' attribute.\n\n\n\nThis issue affects Apache Shiro from 1.0 to 2.1.0, and 3.0.0-alpha-1.\n\nUsers are recommended to upgrade to version 2.1.1, or 3.0.0-alpha-2 or later, which fixes the issue.\n\nIn the affected versions, Shiro-native session manager, as well as Remember-Me manager sends JSESSIONID and rememberMe cookies without 'secure' attribute by default."}]},{"artifact":{"id":"0174286adf7ace24","cpes":["cpe:2.3:a:jonathan-hedley:jsoup:1.15.3:*:*:*:*:*:*:*","cpe:2.3:a:jonathan_hedley:jsoup:1.15.3:*:*:*:*:*:*:*","cpe:2.3:a:org.jsoup:jsoup:1.15.3:*:*:*:*:*:*:*","cpe:2.3:a:jsoup:jsoup:1.15.3:*:*:*:*:*:*:*"],"name":"jsoup","purl":"pkg:maven/org.jsoup/jsoup@1.15.3","type":"java-archive","version":"1.15.3","language":"java","licenses":["https://jsoup.org/license"],"metadata":{"pomGroupID":"org.jsoup","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jsoup-1.15.3.jar","manifestName":"","pomArtifactID":"jsoup","archiveDigests":[{"value":"f6e1d8a8819f854b681c8eaa57fd59a42329e10c","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/jsoup-1.15.3.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.23.1"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-pmhh-3w7g-xqp8","versionConstraint":">=1.14.3,<1.23.1 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.jsoup:jsoup","version":"1.15.3"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-pmhh-3w7g-xqp8","fix":{"state":"fixed","versions":["1.23.1"],"available":[{"date":"2026-08-07","kind":"first-observed","version":"1.23.1"}]},"cvss":[{"type":"Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":4.7,"impactScore":2.8,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-71497","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-71497","date":"2026-11-12","epss":0.00296,"percentile":0.22482}],"risk":0.14356,"urls":["https://github.com/jhy/jsoup/security/advisories/GHSA-pmhh-3w7g-xqp8","https://github.com/jhy/jsoup/issues/2538","https://github.com/jhy/jsoup/commit/92f1aca552548b484bc7d4b94c51e48b8e6eca70","https://github.com/jhy/jsoup/releases/tag/jsoup-1.23.1"],"severity":"Medium","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-pmhh-3w7g-xqp8","description":"jsoup: Cleaner may expose markup with custom raw-text elements"},"relatedVulnerabilities":[{"id":"CVE-2026-71497","cvss":[{"type":"Secondary","source":"security-advisories@github.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","metrics":{"baseScore":4.7,"impactScore":2.8,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-71497","cwe":"CWE-79","type":"Secondary","source":"security-advisories@github.com"}],"epss":[{"cve":"CVE-2026-71497","date":"2026-11-12","epss":0.00296,"percentile":0.22482}],"urls":["https://github.com/jhy/jsoup/commit/92f1aca552548b484bc7d4b94c51e48b8e6eca70","https://github.com/jhy/jsoup/issues/2538","https://github.com/jhy/jsoup/releases/tag/jsoup-1.23.1","https://github.com/jhy/jsoup/security/advisories/GHSA-pmhh-3w7g-xqp8"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-71497","description":"jsoup is a Java library for working with real-world HTML. From 1.14.3 until 1.23.1, jsoup's HTML parser could incorrectly handle a malformed tag name ending in a control character, causing the tag to acquire the parsing behavior of a different element. When a custom Safelist permits certain raw-text elements, this misparsing can cause content that should remain inert text to be emitted as active markup after serialization, potentially resulting in cross-site scripting. jsoup's built-in Safelists are not affected. This issue is fixed in version 1.23.1."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-70907","versionConstraint":"< 1.8.0_504||>= 1.9, < 8.0.504||>= 12, < 17.0.20.1||>= 18, < 21.0.12.1||>= 22, < 25.0.4.1||>= 26, < 26.0.2.1||>= 9, < 11.0.32.1 (jvm)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:oracle:openjdk:21.0.12_p8:*:*:*:*:*:*:*"],"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-70907","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":5.3,"impactScore":1.5,"exploitabilityScore":3.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-70907","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-70907","date":"2026-11-12","epss":0.00278,"percentile":0.20475}],"risk":0.14317,"urls":["https://www.oracle.com/security-alerts/cspuaug2026.html","https://openjdk.org/groups/vulnerability/advisories/2026-08-18"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-70907","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and  21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)."},"relatedVulnerabilities":[]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91463","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91463","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91463","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91463","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91463","date":"2026-11-12","epss":0.00227,"percentile":0.13617}],"risk":0.11690500000000001,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91463"},"relatedVulnerabilities":[{"id":"CVE-2026-91463","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91463","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91463","date":"2026-11-12","epss":0.00227,"percentile":0.13617}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91463","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91463","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91463","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91463","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91463","date":"2026-11-12","epss":0.00227,"percentile":0.13617}],"risk":0.11690500000000001,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91463"},"relatedVulnerabilities":[{"id":"CVE-2026-91463","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91463","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91463","date":"2026-11-12","epss":0.00227,"percentile":0.13617}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91463","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91463","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91463","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91463","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91463","date":"2026-11-12","epss":0.00227,"percentile":0.13617}],"risk":0.11690500000000001,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91463"},"relatedVulnerabilities":[{"id":"CVE-2026-91463","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91463","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91463","date":"2026-11-12","epss":0.00227,"percentile":0.13617}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91463","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91463","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91463","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91463","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91463","date":"2026-11-12","epss":0.00227,"percentile":0.13617}],"risk":0.11690500000000001,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91463"},"relatedVulnerabilities":[{"id":"CVE-2026-91463","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91463","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91463","date":"2026-11-12","epss":0.00227,"percentile":0.13617}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91463","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91463","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91463","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91463","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91463","date":"2026-11-12","epss":0.00227,"percentile":0.13617}],"risk":0.11690500000000001,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91463"},"relatedVulnerabilities":[{"id":"CVE-2026-91463","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91463","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91463","date":"2026-11-12","epss":0.00227,"percentile":0.13617}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91463","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91463","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91463","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91463","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91463","date":"2026-11-12","epss":0.00227,"percentile":0.13617}],"risk":0.11690500000000001,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91463"},"relatedVulnerabilities":[{"id":"CVE-2026-91463","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91463","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91463","date":"2026-11-12","epss":0.00227,"percentile":0.13617}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91463","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91463","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91463","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91463","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91463","date":"2026-11-12","epss":0.00227,"percentile":0.13617}],"risk":0.11690500000000001,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91463"},"relatedVulnerabilities":[{"id":"CVE-2026-91463","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","metrics":{"baseScore":5.3,"impactScore":3.6,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91463","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91463","date":"2026-11-12","epss":0.00227,"percentile":0.13617}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91463","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-83381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83381","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83381","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83381","date":"2026-11-12","epss":0.00226,"percentile":0.13407}],"risk":0.11073999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83381"},"relatedVulnerabilities":[{"id":"CVE-2026-83381","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83381","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83381","date":"2026-11-12","epss":0.00226,"percentile":0.13407}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83381","description":"Vulnerability in Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83381","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83381","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83381","date":"2026-11-12","epss":0.00226,"percentile":0.13407}],"risk":0.11073999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83381"},"relatedVulnerabilities":[{"id":"CVE-2026-83381","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83381","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83381","date":"2026-11-12","epss":0.00226,"percentile":0.13407}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83381","description":"Vulnerability in Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83381","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83381","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83381","date":"2026-11-12","epss":0.00226,"percentile":0.13407}],"risk":0.11073999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83381"},"relatedVulnerabilities":[{"id":"CVE-2026-83381","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83381","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83381","date":"2026-11-12","epss":0.00226,"percentile":0.13407}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83381","description":"Vulnerability in Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83381","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83381","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83381","date":"2026-11-12","epss":0.00226,"percentile":0.13407}],"risk":0.11073999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83381"},"relatedVulnerabilities":[{"id":"CVE-2026-83381","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83381","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83381","date":"2026-11-12","epss":0.00226,"percentile":0.13407}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83381","description":"Vulnerability in Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83381","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83381","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83381","date":"2026-11-12","epss":0.00226,"percentile":0.13407}],"risk":0.11073999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83381"},"relatedVulnerabilities":[{"id":"CVE-2026-83381","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83381","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83381","date":"2026-11-12","epss":0.00226,"percentile":0.13407}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83381","description":"Vulnerability in Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83381","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83381","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83381","date":"2026-11-12","epss":0.00226,"percentile":0.13407}],"risk":0.11073999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83381"},"relatedVulnerabilities":[{"id":"CVE-2026-83381","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83381","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83381","date":"2026-11-12","epss":0.00226,"percentile":0.13407}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83381","description":"Vulnerability in Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83381","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83381","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83381","date":"2026-11-12","epss":0.00226,"percentile":0.13407}],"risk":0.11073999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83381"},"relatedVulnerabilities":[{"id":"CVE-2026-83381","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83381","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83381","date":"2026-11-12","epss":0.00226,"percentile":0.13407}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83381","description":"Vulnerability in Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"58583272b41e1891","cpes":["cpe:2.3:a:logback-core:logback-core:1.5.32:*:*:*:*:*:*:*","cpe:2.3:a:logback-core:logback_core:1.5.32:*:*:*:*:*:*:*","cpe:2.3:a:logback_core:logback-core:1.5.32:*:*:*:*:*:*:*","cpe:2.3:a:logback_core:logback_core:1.5.32:*:*:*:*:*:*:*","cpe:2.3:a:logback:logback-core:1.5.32:*:*:*:*:*:*:*","cpe:2.3:a:logback:logback_core:1.5.32:*:*:*:*:*:*:*","cpe:2.3:a:qos-ch:logback-core:1.5.32:*:*:*:*:*:*:*","cpe:2.3:a:qos-ch:logback_core:1.5.32:*:*:*:*:*:*:*","cpe:2.3:a:qos_ch:logback-core:1.5.32:*:*:*:*:*:*:*","cpe:2.3:a:qos_ch:logback_core:1.5.32:*:*:*:*:*:*:*"],"name":"logback-core","purl":"pkg:maven/ch.qos.logback/logback-core@1.5.32","type":"java-archive","version":"1.5.32","language":"java","licenses":["https://www.eclipse.org/legal/epl-v20.html, https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"],"metadata":{"pomGroupID":"ch.qos.logback","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/logback-core-1.5.32.jar","manifestName":"","pomArtifactID":"logback-core","archiveDigests":[{"value":"fdfb3ff9a842303d4a95207294a6c6bc64e2605d","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/logback-core-1.5.32.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.5.34"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-jhq6-gfmj-v8fx","versionConstraint":"<1.5.34 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"ch.qos.logback:logback-core","version":"1.5.32"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-jhq6-gfmj-v8fx","fix":{"state":"fixed","versions":["1.5.34"],"available":[{"date":"2026-07-16","kind":"first-observed","version":"1.5.34"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:P/RE:M/U:Green","metrics":{"baseScore":2.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-10532","cwe":"CWE-502","type":"Secondary","source":"vulnerability@ncsc.ch"}],"epss":[{"cve":"CVE-2026-10532","date":"2026-11-12","epss":0.0037,"percentile":0.31359}],"risk":0.10915,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-10532","https://logback.qos.ch/news.html#1.5.34","https://github.com/qos-ch/logback/releases/tag/v_1.5.34"],"severity":"Low","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-jhq6-gfmj-v8fx","description":"Logback vulnerable to Object Injection through HardenedObjectInputStream modules"},"relatedVulnerabilities":[{"id":"CVE-2026-10532","cvss":[{"type":"Secondary","source":"vulnerability@ncsc.ch","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:M/U:Green","metrics":{"baseScore":2.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-10532","cwe":"CWE-502","type":"Secondary","source":"vulnerability@ncsc.ch"}],"epss":[{"cve":"CVE-2026-10532","date":"2026-11-12","epss":0.0037,"percentile":0.31359}],"urls":["https://logback.qos.ch/news.html#1.5.34"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-10532","description":"Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core (HardenedObjectInputStream (logback-core) modules) allows Object Injection, albeit heavily restricted.\n\nMore precisely, an attacker able to influence serialized data sent to \nSimpleSocketServer or SimpleSSLSocketServer can instantiate Proxy objects.\n\n\nAlthough deserialization is heavily restricted by HardenedObjectInputStream and no \npractical way to achieve remote code execution or significant privilege \nescalation has been identified, this issue constitutes a bypass of the \nintended security restrictions.\n\n\n\nThis issue affects logback: through 1.5.33 inclusive."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-83378","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83378","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83378","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83378","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83378","date":"2026-11-12","epss":0.00214,"percentile":0.11856}],"risk":0.10486,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83378"},"relatedVulnerabilities":[{"id":"CVE-2026-83378","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83378","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83378","date":"2026-11-12","epss":0.00214,"percentile":0.11856}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83378","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83378","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83378","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83378","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83378","date":"2026-11-12","epss":0.00214,"percentile":0.11856}],"risk":0.10486,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83378"},"relatedVulnerabilities":[{"id":"CVE-2026-83378","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83378","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83378","date":"2026-11-12","epss":0.00214,"percentile":0.11856}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83378","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83378","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83378","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83378","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83378","date":"2026-11-12","epss":0.00214,"percentile":0.11856}],"risk":0.10486,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83378"},"relatedVulnerabilities":[{"id":"CVE-2026-83378","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83378","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83378","date":"2026-11-12","epss":0.00214,"percentile":0.11856}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83378","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83378","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83378","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83378","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83378","date":"2026-11-12","epss":0.00214,"percentile":0.11856}],"risk":0.10486,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83378"},"relatedVulnerabilities":[{"id":"CVE-2026-83378","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83378","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83378","date":"2026-11-12","epss":0.00214,"percentile":0.11856}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83378","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83378","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83378","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83378","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83378","date":"2026-11-12","epss":0.00214,"percentile":0.11856}],"risk":0.10486,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83378"},"relatedVulnerabilities":[{"id":"CVE-2026-83378","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83378","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83378","date":"2026-11-12","epss":0.00214,"percentile":0.11856}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83378","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83378","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83378","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83378","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83378","date":"2026-11-12","epss":0.00214,"percentile":0.11856}],"risk":0.10486,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83378"},"relatedVulnerabilities":[{"id":"CVE-2026-83378","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83378","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83378","date":"2026-11-12","epss":0.00214,"percentile":0.11856}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83378","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83378","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83378","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83378","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83378","date":"2026-11-12","epss":0.00214,"percentile":0.11856}],"risk":0.10486,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83378"},"relatedVulnerabilities":[{"id":"CVE-2026-83378","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83378","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83378","date":"2026-11-12","epss":0.00214,"percentile":0.11856}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83378","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 21.0.12.1, 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-87255","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87255","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87255","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-12","epss":0.00308,"percentile":0.23974}],"risk":0.10317999999999998,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87255"},"relatedVulnerabilities":[{"id":"CVE-2026-87255","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-12","epss":0.00308,"percentile":0.23974}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87255","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87255","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87255","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-12","epss":0.00308,"percentile":0.23974}],"risk":0.10317999999999998,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87255"},"relatedVulnerabilities":[{"id":"CVE-2026-87255","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-12","epss":0.00308,"percentile":0.23974}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87255","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87255","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87255","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-12","epss":0.00308,"percentile":0.23974}],"risk":0.10317999999999998,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87255"},"relatedVulnerabilities":[{"id":"CVE-2026-87255","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-12","epss":0.00308,"percentile":0.23974}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87255","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87255","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87255","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-12","epss":0.00308,"percentile":0.23974}],"risk":0.10317999999999998,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87255"},"relatedVulnerabilities":[{"id":"CVE-2026-87255","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-12","epss":0.00308,"percentile":0.23974}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87255","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87255","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87255","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-12","epss":0.00308,"percentile":0.23974}],"risk":0.10317999999999998,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87255"},"relatedVulnerabilities":[{"id":"CVE-2026-87255","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-12","epss":0.00308,"percentile":0.23974}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87255","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87255","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87255","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-12","epss":0.00308,"percentile":0.23974}],"risk":0.10317999999999998,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87255"},"relatedVulnerabilities":[{"id":"CVE-2026-87255","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-12","epss":0.00308,"percentile":0.23974}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87255","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87255","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87255","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-12","epss":0.00308,"percentile":0.23974}],"risk":0.10317999999999998,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87255"},"relatedVulnerabilities":[{"id":"CVE-2026-87255","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87255","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87255","date":"2026-11-12","epss":0.00308,"percentile":0.23974}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87255","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 25.0.4.1 and  27. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"fa2a8d27b3bb32ed","cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-project:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*"],"name":"alsa-lib","purl":"pkg:apk/alpine/alsa-lib@1.2.15.3-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.2.15.3-r0","language":"","licenses":["LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/alsa"},{"path":"/etc/alsa/conf.d"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/aserver"},{"path":"/usr/lib"},{"path":"/usr/lib/libasound.so.2"},{"path":"/usr/lib/libasound.so.2.0.0"},{"path":"/usr/lib/libatopology.so.2"},{"path":"/usr/lib/libatopology.so.2.0.0"},{"path":"/usr/share"},{"path":"/usr/share/alsa"},{"path":"/usr/share/alsa/alsa.conf"},{"path":"/usr/share/alsa/cards"},{"path":"/usr/share/alsa/cards/AACI.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-MODEM.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-SPDMA.conf"},{"path":"/usr/share/alsa/cards/ATIIXP.conf"},{"path":"/usr/share/alsa/cards/AU8810.conf"},{"path":"/usr/share/alsa/cards/AU8820.conf"},{"path":"/usr/share/alsa/cards/AU8830.conf"},{"path":"/usr/share/alsa/cards/Audigy.conf"},{"path":"/usr/share/alsa/cards/Audigy2.conf"},{"path":"/usr/share/alsa/cards/Aureon51.conf"},{"path":"/usr/share/alsa/cards/Aureon71.conf"},{"path":"/usr/share/alsa/cards/CA0106.conf"},{"path":"/usr/share/alsa/cards/CMI8338-SWIEC.conf"},{"path":"/usr/share/alsa/cards/CMI8338.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC6.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC8.conf"},{"path":"/usr/share/alsa/cards/CMI8788.conf"},{"path":"/usr/share/alsa/cards/CS46xx.conf"},{"path":"/usr/share/alsa/cards/EMU10K1.conf"},{"path":"/usr/share/alsa/cards/EMU10K1X.conf"},{"path":"/usr/share/alsa/cards/ENS1370.conf"},{"path":"/usr/share/alsa/cards/ENS1371.conf"},{"path":"/usr/share/alsa/cards/ES1968.conf"},{"path":"/usr/share/alsa/cards/Echo_Echo3G.conf"},{"path":"/usr/share/alsa/cards/FM801.conf"},{"path":"/usr/share/alsa/cards/FWSpeakers.conf"},{"path":"/usr/share/alsa/cards/FireWave.conf"},{"path":"/usr/share/alsa/cards/GUS.conf"},{"path":"/usr/share/alsa/cards/HDA-Intel.conf"},{"path":"/usr/share/alsa/cards/HdmiLpeAudio.conf"},{"path":"/usr/share/alsa/cards/ICE1712.conf"},{"path":"/usr/share/alsa/cards/ICE1724.conf"},{"path":"/usr/share/alsa/cards/ICH-MODEM.conf"},{"path":"/usr/share/alsa/cards/ICH.conf"},{"path":"/usr/share/alsa/cards/ICH4.conf"},{"path":"/usr/share/alsa/cards/Loopback.conf"},{"path":"/usr/share/alsa/cards/Maestro3.conf"},{"path":"/usr/share/alsa/cards/NFORCE.conf"},{"path":"/usr/share/alsa/cards/PC-Speaker.conf"},{"path":"/usr/share/alsa/cards/PMac.conf"},{"path":"/usr/share/alsa/cards/PMacToonie.conf"},{"path":"/usr/share/alsa/cards/PS3.conf"},{"path":"/usr/share/alsa/cards/RME9636.conf"},{"path":"/usr/share/alsa/cards/RME9652.conf"},{"path":"/usr/share/alsa/cards/SB-XFi.conf"},{"path":"/usr/share/alsa/cards/SI7018.conf"},{"path":"/usr/share/alsa/cards/TRID4DWAVENX.conf"},{"path":"/usr/share/alsa/cards/USB-Audio.conf"},{"path":"/usr/share/alsa/cards/VIA686A.conf"},{"path":"/usr/share/alsa/cards/VIA8233.conf"},{"path":"/usr/share/alsa/cards/VIA8233A.conf"},{"path":"/usr/share/alsa/cards/VIA8237.conf"},{"path":"/usr/share/alsa/cards/VX222.conf"},{"path":"/usr/share/alsa/cards/VXPocket.conf"},{"path":"/usr/share/alsa/cards/VXPocket440.conf"},{"path":"/usr/share/alsa/cards/YMF744.conf"},{"path":"/usr/share/alsa/cards/aliases.conf"},{"path":"/usr/share/alsa/cards/pistachio-card.conf"},{"path":"/usr/share/alsa/cards/vc4-hdmi.conf"},{"path":"/usr/share/alsa/ctl"},{"path":"/usr/share/alsa/ctl/default.conf"},{"path":"/usr/share/alsa/pcm"},{"path":"/usr/share/alsa/pcm/center_lfe.conf"},{"path":"/usr/share/alsa/pcm/default.conf"},{"path":"/usr/share/alsa/pcm/dmix.conf"},{"path":"/usr/share/alsa/pcm/dpl.conf"},{"path":"/usr/share/alsa/pcm/dsnoop.conf"},{"path":"/usr/share/alsa/pcm/front.conf"},{"path":"/usr/share/alsa/pcm/hdmi.conf"},{"path":"/usr/share/alsa/pcm/iec958.conf"},{"path":"/usr/share/alsa/pcm/modem.conf"},{"path":"/usr/share/alsa/pcm/rear.conf"},{"path":"/usr/share/alsa/pcm/side.conf"},{"path":"/usr/share/alsa/pcm/surround21.conf"},{"path":"/usr/share/alsa/pcm/surround40.conf"},{"path":"/usr/share/alsa/pcm/surround41.conf"},{"path":"/usr/share/alsa/pcm/surround50.conf"},{"path":"/usr/share/alsa/pcm/surround51.conf"},{"path":"/usr/share/alsa/pcm/surround71.conf"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"alsa-lib"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-56109","versionConstraint":"< 1.2.16.1 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.15.3:*:*:*:*:*:*:*"],"package":{"name":"alsa-lib","version":"1.2.15.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-56109","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":7},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H","metrics":{"baseScore":6.8,"impactScore":4.3,"exploitabilityScore":2.6},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56109","cwe":"CWE-415","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-56109","date":"2026-11-12","epss":0.00138,"percentile":0.03264}],"risk":0.09935999999999999,"urls":["https://github.com/alsa-project/alsa-lib/commit/536dd6f8affdf5197c12a63a71c92a70b2833cc0","https://github.com/alsa-project/alsa-lib/releases/tag/v1.2.16.1","https://lore.kernel.org/alsa-devel/CAGt8pqBU0p2voB+qHxWGcNJrKHAcBhAyHUUBPLBN-Yj_SiV6MQ@mail.gmail.com/","https://www.vulncheck.com/advisories/alsa-library-double-free-via-parse-def-in-conf-c"],"severity":"High","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56109","description":"The Advanced Linux Sound Architecture (ALSA) library before 1.2.16.1 contains a double-free vulnerability in parse_def() in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafted ALSA configuration text. When parsing nested compound or array configuration blocks, parse_def() fails to check return values before continuing, causing snd_config_delete() to be called twice on the same already-freed node, resulting in a NULL-pointer write or invalid memory read."},"relatedVulnerabilities":[]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-60589","versionConstraint":"< 1.8.0_504||>= 1.9, < 8.0.504||>= 12, < 17.0.20.1||>= 18, < 21.0.12.1||>= 22, < 25.0.4.1||>= 26, < 26.0.2.1||>= 9, < 11.0.32.1 (jvm)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:oracle:openjdk:21.0.12_p8:*:*:*:*:*:*:*"],"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-60589","fix":{"state":"unknown","versions":[]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-60589","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-60589","date":"2026-11-12","epss":0.00265,"percentile":0.18597}],"risk":0.08877499999999999,"urls":["https://www.oracle.com/security-alerts/cspuaug2026.html","https://openjdk.org/groups/vulnerability/advisories/2026-08-18"],"severity":"Low","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-60589","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and  21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."},"relatedVulnerabilities":[]},{"artifact":{"id":"fa2a8d27b3bb32ed","cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-project:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*"],"name":"alsa-lib","purl":"pkg:apk/alpine/alsa-lib@1.2.15.3-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.2.15.3-r0","language":"","licenses":["LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/alsa"},{"path":"/etc/alsa/conf.d"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/aserver"},{"path":"/usr/lib"},{"path":"/usr/lib/libasound.so.2"},{"path":"/usr/lib/libasound.so.2.0.0"},{"path":"/usr/lib/libatopology.so.2"},{"path":"/usr/lib/libatopology.so.2.0.0"},{"path":"/usr/share"},{"path":"/usr/share/alsa"},{"path":"/usr/share/alsa/alsa.conf"},{"path":"/usr/share/alsa/cards"},{"path":"/usr/share/alsa/cards/AACI.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-MODEM.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-SPDMA.conf"},{"path":"/usr/share/alsa/cards/ATIIXP.conf"},{"path":"/usr/share/alsa/cards/AU8810.conf"},{"path":"/usr/share/alsa/cards/AU8820.conf"},{"path":"/usr/share/alsa/cards/AU8830.conf"},{"path":"/usr/share/alsa/cards/Audigy.conf"},{"path":"/usr/share/alsa/cards/Audigy2.conf"},{"path":"/usr/share/alsa/cards/Aureon51.conf"},{"path":"/usr/share/alsa/cards/Aureon71.conf"},{"path":"/usr/share/alsa/cards/CA0106.conf"},{"path":"/usr/share/alsa/cards/CMI8338-SWIEC.conf"},{"path":"/usr/share/alsa/cards/CMI8338.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC6.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC8.conf"},{"path":"/usr/share/alsa/cards/CMI8788.conf"},{"path":"/usr/share/alsa/cards/CS46xx.conf"},{"path":"/usr/share/alsa/cards/EMU10K1.conf"},{"path":"/usr/share/alsa/cards/EMU10K1X.conf"},{"path":"/usr/share/alsa/cards/ENS1370.conf"},{"path":"/usr/share/alsa/cards/ENS1371.conf"},{"path":"/usr/share/alsa/cards/ES1968.conf"},{"path":"/usr/share/alsa/cards/Echo_Echo3G.conf"},{"path":"/usr/share/alsa/cards/FM801.conf"},{"path":"/usr/share/alsa/cards/FWSpeakers.conf"},{"path":"/usr/share/alsa/cards/FireWave.conf"},{"path":"/usr/share/alsa/cards/GUS.conf"},{"path":"/usr/share/alsa/cards/HDA-Intel.conf"},{"path":"/usr/share/alsa/cards/HdmiLpeAudio.conf"},{"path":"/usr/share/alsa/cards/ICE1712.conf"},{"path":"/usr/share/alsa/cards/ICE1724.conf"},{"path":"/usr/share/alsa/cards/ICH-MODEM.conf"},{"path":"/usr/share/alsa/cards/ICH.conf"},{"path":"/usr/share/alsa/cards/ICH4.conf"},{"path":"/usr/share/alsa/cards/Loopback.conf"},{"path":"/usr/share/alsa/cards/Maestro3.conf"},{"path":"/usr/share/alsa/cards/NFORCE.conf"},{"path":"/usr/share/alsa/cards/PC-Speaker.conf"},{"path":"/usr/share/alsa/cards/PMac.conf"},{"path":"/usr/share/alsa/cards/PMacToonie.conf"},{"path":"/usr/share/alsa/cards/PS3.conf"},{"path":"/usr/share/alsa/cards/RME9636.conf"},{"path":"/usr/share/alsa/cards/RME9652.conf"},{"path":"/usr/share/alsa/cards/SB-XFi.conf"},{"path":"/usr/share/alsa/cards/SI7018.conf"},{"path":"/usr/share/alsa/cards/TRID4DWAVENX.conf"},{"path":"/usr/share/alsa/cards/USB-Audio.conf"},{"path":"/usr/share/alsa/cards/VIA686A.conf"},{"path":"/usr/share/alsa/cards/VIA8233.conf"},{"path":"/usr/share/alsa/cards/VIA8233A.conf"},{"path":"/usr/share/alsa/cards/VIA8237.conf"},{"path":"/usr/share/alsa/cards/VX222.conf"},{"path":"/usr/share/alsa/cards/VXPocket.conf"},{"path":"/usr/share/alsa/cards/VXPocket440.conf"},{"path":"/usr/share/alsa/cards/YMF744.conf"},{"path":"/usr/share/alsa/cards/aliases.conf"},{"path":"/usr/share/alsa/cards/pistachio-card.conf"},{"path":"/usr/share/alsa/cards/vc4-hdmi.conf"},{"path":"/usr/share/alsa/ctl"},{"path":"/usr/share/alsa/ctl/default.conf"},{"path":"/usr/share/alsa/pcm"},{"path":"/usr/share/alsa/pcm/center_lfe.conf"},{"path":"/usr/share/alsa/pcm/default.conf"},{"path":"/usr/share/alsa/pcm/dmix.conf"},{"path":"/usr/share/alsa/pcm/dpl.conf"},{"path":"/usr/share/alsa/pcm/dsnoop.conf"},{"path":"/usr/share/alsa/pcm/front.conf"},{"path":"/usr/share/alsa/pcm/hdmi.conf"},{"path":"/usr/share/alsa/pcm/iec958.conf"},{"path":"/usr/share/alsa/pcm/modem.conf"},{"path":"/usr/share/alsa/pcm/rear.conf"},{"path":"/usr/share/alsa/pcm/side.conf"},{"path":"/usr/share/alsa/pcm/surround21.conf"},{"path":"/usr/share/alsa/pcm/surround40.conf"},{"path":"/usr/share/alsa/pcm/surround41.conf"},{"path":"/usr/share/alsa/pcm/surround50.conf"},{"path":"/usr/share/alsa/pcm/surround51.conf"},{"path":"/usr/share/alsa/pcm/surround71.conf"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"alsa-lib"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-90781","versionConstraint":"<= 1.2.16.1 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.15.3:*:*:*:*:*:*:*"],"package":{"name":"alsa-lib","version":"1.2.15.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-90781","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","metrics":{"baseScore":4.4,"impactScore":2.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-90781","cwe":"CWE-193","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-90781","date":"2026-11-12","epss":0.00179,"percentile":0.07562}],"risk":0.08592,"urls":["https://github.com/alsa-project/alsa-lib","https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/control/ctlparse.c#L216-L241","https://github.com/alsa-project/alsa-lib/commit/f84cd4ced7b36fddb8e4ee24404cf7c091d27020","https://lore.kernel.org/alsa-devel/CACBQ=P2FhO3M6dkv3cWuKb6Qhs92ouV+FJ3SJZ_PVBSSdJWRAQ@mail.gmail.com/","https://www.vulncheck.com/advisories/alsa-lib-through-1.2.16.1-off-by-one-stack-buffer-overflow-in-snd-ctl-ascii-elem-id-parse"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-90781","description":"alsa-lib through 1.2.16.1 contains a stack buffer overflow in the __snd_ctl_ascii_elem_id_parse() function that writes one byte past a 64-byte buffer when parsing a name= field with 64 or more characters. Attackers can supply a long control-element identifier string through saved state files or command-line arguments to overwrite adjacent stack memory and crash the calling process."},"relatedVulnerabilities":[]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-83376","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83376","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83376","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83376","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83376","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"risk":0.08442,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83376"},"relatedVulnerabilities":[{"id":"CVE-2026-83376","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83376","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83376","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83376","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-87367","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87367","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87367","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87367","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87367","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"risk":0.08442,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87367"},"relatedVulnerabilities":[{"id":"CVE-2026-87367","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87367","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87367","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87367","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83376","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83376","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83376","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83376","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"risk":0.08442,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83376"},"relatedVulnerabilities":[{"id":"CVE-2026-83376","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83376","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83376","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83376","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87367","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87367","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87367","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87367","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"risk":0.08442,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87367"},"relatedVulnerabilities":[{"id":"CVE-2026-87367","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87367","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87367","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87367","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83376","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83376","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83376","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83376","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"risk":0.08442,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83376"},"relatedVulnerabilities":[{"id":"CVE-2026-83376","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83376","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83376","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83376","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87367","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87367","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87367","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87367","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"risk":0.08442,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87367"},"relatedVulnerabilities":[{"id":"CVE-2026-87367","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87367","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87367","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87367","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83376","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83376","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83376","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83376","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"risk":0.08442,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83376"},"relatedVulnerabilities":[{"id":"CVE-2026-83376","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83376","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83376","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83376","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87367","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87367","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87367","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87367","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"risk":0.08442,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87367"},"relatedVulnerabilities":[{"id":"CVE-2026-87367","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87367","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87367","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87367","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83376","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83376","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83376","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83376","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"risk":0.08442,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83376"},"relatedVulnerabilities":[{"id":"CVE-2026-83376","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83376","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83376","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83376","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87367","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87367","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87367","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87367","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"risk":0.08442,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87367"},"relatedVulnerabilities":[{"id":"CVE-2026-87367","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87367","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87367","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87367","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83376","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83376","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83376","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83376","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"risk":0.08442,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83376"},"relatedVulnerabilities":[{"id":"CVE-2026-83376","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83376","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83376","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83376","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87367","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87367","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87367","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87367","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"risk":0.08442,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87367"},"relatedVulnerabilities":[{"id":"CVE-2026-87367","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87367","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87367","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87367","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-83376","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-83376","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83376","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83376","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"risk":0.08442,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-83376"},"relatedVulnerabilities":[{"id":"CVE-2026-83376","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-83376","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-83376","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-83376","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87367","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87367","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87367","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87367","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"risk":0.08442,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87367"},"relatedVulnerabilities":[{"id":"CVE-2026-87367","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87367","cwe":"CWE-200","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87367","date":"2026-11-12","epss":0.00252,"percentile":0.16793}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87367","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91374","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91374","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91374","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"risk":0.08232,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91374"},"relatedVulnerabilities":[{"id":"CVE-2026-91374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91374","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91374","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91487","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91487","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91487","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91487","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91487","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"risk":0.08232,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91487"},"relatedVulnerabilities":[{"id":"CVE-2026-91487","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91487","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91487","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91487","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91374","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91374","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91374","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"risk":0.08232,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91374"},"relatedVulnerabilities":[{"id":"CVE-2026-91374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91374","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91374","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91487","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91487","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91487","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91487","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"risk":0.08232,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91487"},"relatedVulnerabilities":[{"id":"CVE-2026-91487","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91487","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91487","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91487","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91374","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91374","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91374","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"risk":0.08232,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91374"},"relatedVulnerabilities":[{"id":"CVE-2026-91374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91374","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91374","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91487","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91487","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91487","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91487","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"risk":0.08232,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91487"},"relatedVulnerabilities":[{"id":"CVE-2026-91487","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91487","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91487","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91487","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91374","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91374","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91374","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"risk":0.08232,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91374"},"relatedVulnerabilities":[{"id":"CVE-2026-91374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91374","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91374","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91487","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91487","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91487","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91487","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"risk":0.08232,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91487"},"relatedVulnerabilities":[{"id":"CVE-2026-91487","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91487","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91487","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91487","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91374","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91374","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91374","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"risk":0.08232,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91374"},"relatedVulnerabilities":[{"id":"CVE-2026-91374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91374","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91374","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91487","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91487","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91487","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91487","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"risk":0.08232,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91487"},"relatedVulnerabilities":[{"id":"CVE-2026-91487","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91487","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91487","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91487","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91374","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91374","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91374","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"risk":0.08232,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91374"},"relatedVulnerabilities":[{"id":"CVE-2026-91374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91374","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91374","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91487","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91487","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91487","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91487","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"risk":0.08232,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91487"},"relatedVulnerabilities":[{"id":"CVE-2026-91487","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91487","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91487","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91487","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91374","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91374","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91374","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91374","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"risk":0.08232,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91374"},"relatedVulnerabilities":[{"id":"CVE-2026-91374","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91374","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91374","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91374","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91487","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91487","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91487","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91487","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"risk":0.08232,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91487"},"relatedVulnerabilities":[{"id":"CVE-2026-91487","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.8,"impactScore":2.6,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91487","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91487","date":"2026-11-12","epss":0.00168,"percentile":0.06213}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91487","description":"Vulnerability in Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as  unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91381","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91381","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91381","date":"2026-11-12","epss":0.00239,"percentile":0.1506}],"risk":0.080065,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91381"},"relatedVulnerabilities":[{"id":"CVE-2026-91381","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91381","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91381","date":"2026-11-12","epss":0.00239,"percentile":0.1506}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91381","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91381","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91381","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91381","date":"2026-11-12","epss":0.00239,"percentile":0.1506}],"risk":0.080065,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91381"},"relatedVulnerabilities":[{"id":"CVE-2026-91381","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91381","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91381","date":"2026-11-12","epss":0.00239,"percentile":0.1506}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91381","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91381","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91381","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91381","date":"2026-11-12","epss":0.00239,"percentile":0.1506}],"risk":0.080065,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91381"},"relatedVulnerabilities":[{"id":"CVE-2026-91381","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91381","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91381","date":"2026-11-12","epss":0.00239,"percentile":0.1506}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91381","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91381","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91381","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91381","date":"2026-11-12","epss":0.00239,"percentile":0.1506}],"risk":0.080065,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91381"},"relatedVulnerabilities":[{"id":"CVE-2026-91381","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91381","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91381","date":"2026-11-12","epss":0.00239,"percentile":0.1506}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91381","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91381","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91381","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91381","date":"2026-11-12","epss":0.00239,"percentile":0.1506}],"risk":0.080065,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91381"},"relatedVulnerabilities":[{"id":"CVE-2026-91381","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91381","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91381","date":"2026-11-12","epss":0.00239,"percentile":0.1506}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91381","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91381","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91381","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91381","date":"2026-11-12","epss":0.00239,"percentile":0.1506}],"risk":0.080065,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91381"},"relatedVulnerabilities":[{"id":"CVE-2026-91381","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91381","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91381","date":"2026-11-12","epss":0.00239,"percentile":0.1506}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91381","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91381","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91381","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91381","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91381","date":"2026-11-12","epss":0.00239,"percentile":0.1506}],"risk":0.080065,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91381"},"relatedVulnerabilities":[{"id":"CVE-2026-91381","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91381","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91381","date":"2026-11-12","epss":0.00239,"percentile":0.1506}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91381","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u503 and  8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-87292","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87292","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87292","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87292","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87292","date":"2026-11-12","epss":0.00239,"percentile":0.15059}],"risk":0.080065,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87292"},"relatedVulnerabilities":[{"id":"CVE-2026-87292","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87292","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87292","date":"2026-11-12","epss":0.00239,"percentile":0.15059}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87292","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87292","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87292","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87292","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87292","date":"2026-11-12","epss":0.00239,"percentile":0.15059}],"risk":0.080065,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87292"},"relatedVulnerabilities":[{"id":"CVE-2026-87292","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87292","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87292","date":"2026-11-12","epss":0.00239,"percentile":0.15059}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87292","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87292","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87292","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87292","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87292","date":"2026-11-12","epss":0.00239,"percentile":0.15059}],"risk":0.080065,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87292"},"relatedVulnerabilities":[{"id":"CVE-2026-87292","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87292","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87292","date":"2026-11-12","epss":0.00239,"percentile":0.15059}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87292","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87292","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87292","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87292","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87292","date":"2026-11-12","epss":0.00239,"percentile":0.15059}],"risk":0.080065,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87292"},"relatedVulnerabilities":[{"id":"CVE-2026-87292","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87292","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87292","date":"2026-11-12","epss":0.00239,"percentile":0.15059}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87292","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87292","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87292","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87292","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87292","date":"2026-11-12","epss":0.00239,"percentile":0.15059}],"risk":0.080065,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87292"},"relatedVulnerabilities":[{"id":"CVE-2026-87292","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87292","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87292","date":"2026-11-12","epss":0.00239,"percentile":0.15059}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87292","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87292","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87292","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87292","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87292","date":"2026-11-12","epss":0.00239,"percentile":0.15059}],"risk":0.080065,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87292"},"relatedVulnerabilities":[{"id":"CVE-2026-87292","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87292","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87292","date":"2026-11-12","epss":0.00239,"percentile":0.15059}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87292","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-87292","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-87292","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87292","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87292","date":"2026-11-12","epss":0.00239,"percentile":0.15059}],"risk":0.080065,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-87292"},"relatedVulnerabilities":[{"id":"CVE-2026-87292","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-87292","cwe":"CWE-287","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-87292","date":"2026-11-12","epss":0.00239,"percentile":0.15059}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-87292","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91400","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-12","epss":0.00257,"percentile":0.17519}],"risk":0.07838499999999998,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91400"},"relatedVulnerabilities":[{"id":"CVE-2026-91400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-12","epss":0.00257,"percentile":0.17519}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91400","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-12","epss":0.00257,"percentile":0.17519}],"risk":0.07838499999999998,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91400"},"relatedVulnerabilities":[{"id":"CVE-2026-91400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-12","epss":0.00257,"percentile":0.17519}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91400","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-12","epss":0.00257,"percentile":0.17519}],"risk":0.07838499999999998,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91400"},"relatedVulnerabilities":[{"id":"CVE-2026-91400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-12","epss":0.00257,"percentile":0.17519}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91400","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-12","epss":0.00257,"percentile":0.17519}],"risk":0.07838499999999998,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91400"},"relatedVulnerabilities":[{"id":"CVE-2026-91400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-12","epss":0.00257,"percentile":0.17519}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91400","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-12","epss":0.00257,"percentile":0.17519}],"risk":0.07838499999999998,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91400"},"relatedVulnerabilities":[{"id":"CVE-2026-91400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-12","epss":0.00257,"percentile":0.17519}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91400","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-12","epss":0.00257,"percentile":0.17519}],"risk":0.07838499999999998,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91400"},"relatedVulnerabilities":[{"id":"CVE-2026-91400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-12","epss":0.00257,"percentile":0.17519}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91400","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91400","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-12","epss":0.00257,"percentile":0.17519}],"risk":0.07838499999999998,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91400"},"relatedVulnerabilities":[{"id":"CVE-2026-91400","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91400","cwe":"CWE-400","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91400","date":"2026-11-12","epss":0.00257,"percentile":0.17519}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91400","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L)."}]},{"artifact":{"id":"58583272b41e1891","cpes":["cpe:2.3:a:logback-core:logback-core:1.5.32:*:*:*:*:*:*:*","cpe:2.3:a:logback-core:logback_core:1.5.32:*:*:*:*:*:*:*","cpe:2.3:a:logback_core:logback-core:1.5.32:*:*:*:*:*:*:*","cpe:2.3:a:logback_core:logback_core:1.5.32:*:*:*:*:*:*:*","cpe:2.3:a:logback:logback-core:1.5.32:*:*:*:*:*:*:*","cpe:2.3:a:logback:logback_core:1.5.32:*:*:*:*:*:*:*","cpe:2.3:a:qos-ch:logback-core:1.5.32:*:*:*:*:*:*:*","cpe:2.3:a:qos-ch:logback_core:1.5.32:*:*:*:*:*:*:*","cpe:2.3:a:qos_ch:logback-core:1.5.32:*:*:*:*:*:*:*","cpe:2.3:a:qos_ch:logback_core:1.5.32:*:*:*:*:*:*:*"],"name":"logback-core","purl":"pkg:maven/ch.qos.logback/logback-core@1.5.32","type":"java-archive","version":"1.5.32","language":"java","licenses":["https://www.eclipse.org/legal/epl-v20.html, https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"],"metadata":{"pomGroupID":"ch.qos.logback","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/logback-core-1.5.32.jar","manifestName":"","pomArtifactID":"logback-core","archiveDigests":[{"value":"fdfb3ff9a842303d4a95207294a6c6bc64e2605d","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/logback-core-1.5.32.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"1.5.33"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-p47f-322f-whfh","versionConstraint":"<=1.5.32 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"ch.qos.logback:logback-core","version":"1.5.32"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-p47f-322f-whfh","fix":{"state":"fixed","versions":["1.5.33"],"available":[{"date":"2026-07-02","kind":"first-observed","version":"1.5.33"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:P/RE:L/U:Green","metrics":{"baseScore":1.2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-9828","cwe":"CWE-502","type":"Secondary","source":"vulnerability@ncsc.ch"}],"epss":[{"cve":"CVE-2026-9828","date":"2026-11-12","epss":0.0037,"percentile":0.31315}],"risk":0.0777,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-9828","https://logback.qos.ch/news.html#1.5.33"],"severity":"Low","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-p47f-322f-whfh","description":"QOS.CH Sarl logback logback-core has a deserialization of untrusted data vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2026-9828","cvss":[{"type":"Secondary","source":"vulnerability@ncsc.ch","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:L/U:Green","metrics":{"baseScore":2.9},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-9828","cwe":"CWE-502","type":"Secondary","source":"vulnerability@ncsc.ch"}],"epss":[{"cve":"CVE-2026-9828","date":"2026-11-12","epss":0.0037,"percentile":0.31315}],"urls":["https://logback.qos.ch/news.html#1.5.33"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-9828","description":"Deserialization of untrusted data vulnerability in QOS.CH Sarl logback logback-core (HardenedObjectInputStream (logback-core) modules) allows Object Injection albeit heavily restricted.\n\nMore precisely, an attacker able to influence serialized data sent to \nSimpleSocketServer or SimpleSSLSocketServer can instantiate objects from\n classes in the java.lang and java.util packages that are not explicitly\n blocked.\n\nAlthough deserialization is heavily restricted by HardenedObjectInputStream and no \npractical way to achieve remote code execution or significant privilege \nescalation has been identified, this issue constitutes a bypass of the \nintended security restrictions.\n\n\n\nThis issue affects logback: through 1.5.32 inclusive."}]},{"artifact":{"id":"8de79d211419e1a7","cpes":["cpe:2.3:a:apache:shiro-core:1.13.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:shiro_core:1.13.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:shiro:1.13.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:core:1.13.0:*:*:*:*:*:*:*"],"name":"shiro-core","purl":"pkg:maven/org.apache.shiro/shiro-core@1.13.0","type":"java-archive","version":"1.13.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.apache.shiro","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/shiro-core-1.13.0.jar","manifestName":"","pomArtifactID":"shiro-core","archiveDigests":[{"value":"7e542e3d614b197bf10005e98e19f9f19cb943e7","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/shiro-core-1.13.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.0.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-m8g6-vrr2-x7ff","versionConstraint":">=1.2.4,<3.0.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.shiro:shiro-core","version":"1.13.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-m8g6-vrr2-x7ff","fix":{"state":"fixed","versions":["3.0.0"],"available":[{"date":"2026-11-04","kind":"first-observed","version":"3.0.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/S:N/AU:Y/V:D/RE:L/U:Green","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56130","cwe":"CWE-294","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-56130","date":"2026-11-12","epss":0.00299,"percentile":0.22864}],"risk":0.07475,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-56130","https://lists.apache.org/thread/9k9b3bmlq516ylvf7cdp3dlrtdtmxbmo","http://www.openwall.com/lists/oss-security/2026/06/24/8","https://github.com/github/advisory-database/pull/10074","https://github.com/apache/shiro/commit/e441ea37009a426b122c53b0120ae5879d00e354"],"severity":"Low","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-m8g6-vrr2-x7ff","description":"Apache Shiro's \"remember me\" cookie age is not verified on the server."},"relatedVulnerabilities":[{"id":"CVE-2026-56130","cvss":[{"type":"Secondary","source":"security@apache.org","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:X/V:D/RE:L/U:Green","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56130","cwe":"CWE-294","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-56130","date":"2026-11-12","epss":0.00299,"percentile":0.22864}],"urls":["https://lists.apache.org/thread/9k9b3bmlq516ylvf7cdp3dlrtdtmxbmo","http://www.openwall.com/lists/oss-security/2026/06/24/8"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56130","description":"\"Remember me\" cookie age is not verified on the server. This potentially allows an attacker to intercept a valid cookie and reuse it indefinitely, even after the configured expiration time has passed.\nThis issue affects all Apache Shiro versions from 1.2.4 through 2.x, and 3.0.0-alpha-1, only when RememberMe functionality is enabled.\n\n\nUpgrade to version 3.0.0 or later, which fixes the issue."}]},{"artifact":{"id":"866a8444ac1e7113","cpes":["cpe:2.3:a:apache:shiro-web:1.13.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:shiro_web:1.13.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:shiro:1.13.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:web:1.13.0:*:*:*:*:*:*:*"],"name":"shiro-web","purl":"pkg:maven/org.apache.shiro/shiro-web@1.13.0","type":"java-archive","version":"1.13.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.apache.shiro","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/shiro-web-1.13.0.jar","manifestName":"","pomArtifactID":"shiro-web","archiveDigests":[{"value":"99a09dc19f37487639b5bab978953bc38963d6ea","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/shiro-web-1.13.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"3.0.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-m8g6-vrr2-x7ff","versionConstraint":">=1.2.4,<3.0.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.shiro:shiro-web","version":"1.13.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-m8g6-vrr2-x7ff","fix":{"state":"fixed","versions":["3.0.0"],"available":[{"date":"2026-11-04","kind":"first-observed","version":"3.0.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/S:N/AU:Y/V:D/RE:L/U:Green","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56130","cwe":"CWE-294","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-56130","date":"2026-11-12","epss":0.00299,"percentile":0.22864}],"risk":0.07475,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-56130","https://lists.apache.org/thread/9k9b3bmlq516ylvf7cdp3dlrtdtmxbmo","http://www.openwall.com/lists/oss-security/2026/06/24/8","https://github.com/github/advisory-database/pull/10074","https://github.com/apache/shiro/commit/e441ea37009a426b122c53b0120ae5879d00e354"],"severity":"Low","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-m8g6-vrr2-x7ff","description":"Apache Shiro's \"remember me\" cookie age is not verified on the server."},"relatedVulnerabilities":[{"id":"CVE-2026-56130","cvss":[{"type":"Secondary","source":"security@apache.org","vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:A/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:X/V:D/RE:L/U:Green","metrics":{"baseScore":2},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-56130","cwe":"CWE-294","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-56130","date":"2026-11-12","epss":0.00299,"percentile":0.22864}],"urls":["https://lists.apache.org/thread/9k9b3bmlq516ylvf7cdp3dlrtdtmxbmo","http://www.openwall.com/lists/oss-security/2026/06/24/8"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-56130","description":"\"Remember me\" cookie age is not verified on the server. This potentially allows an attacker to intercept a valid cookie and reuse it indefinitely, even after the configured expiration time has passed.\nThis issue affects all Apache Shiro versions from 1.2.4 through 2.x, and 3.0.0-alpha-1, only when RememberMe functionality is enabled.\n\n\nUpgrade to version 3.0.0 or later, which fixes the issue."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91402","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91402","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91402","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91402","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91402","date":"2026-11-12","epss":0.00243,"percentile":0.15582}],"risk":0.074115,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91402"},"relatedVulnerabilities":[{"id":"CVE-2026-91402","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91402","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91402","date":"2026-11-12","epss":0.00243,"percentile":0.15582}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91402","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u503; Oracle JavaFX: 21.0.12, 25.0.4 and  27; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91402","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91402","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91402","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91402","date":"2026-11-12","epss":0.00243,"percentile":0.15582}],"risk":0.074115,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91402"},"relatedVulnerabilities":[{"id":"CVE-2026-91402","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91402","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91402","date":"2026-11-12","epss":0.00243,"percentile":0.15582}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91402","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u503; Oracle JavaFX: 21.0.12, 25.0.4 and  27; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91402","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91402","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91402","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91402","date":"2026-11-12","epss":0.00243,"percentile":0.15582}],"risk":0.074115,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91402"},"relatedVulnerabilities":[{"id":"CVE-2026-91402","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91402","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91402","date":"2026-11-12","epss":0.00243,"percentile":0.15582}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91402","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u503; Oracle JavaFX: 21.0.12, 25.0.4 and  27; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91402","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91402","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91402","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91402","date":"2026-11-12","epss":0.00243,"percentile":0.15582}],"risk":0.074115,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91402"},"relatedVulnerabilities":[{"id":"CVE-2026-91402","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91402","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91402","date":"2026-11-12","epss":0.00243,"percentile":0.15582}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91402","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u503; Oracle JavaFX: 21.0.12, 25.0.4 and  27; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91402","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91402","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91402","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91402","date":"2026-11-12","epss":0.00243,"percentile":0.15582}],"risk":0.074115,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91402"},"relatedVulnerabilities":[{"id":"CVE-2026-91402","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91402","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91402","date":"2026-11-12","epss":0.00243,"percentile":0.15582}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91402","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u503; Oracle JavaFX: 21.0.12, 25.0.4 and  27; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91402","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91402","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91402","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91402","date":"2026-11-12","epss":0.00243,"percentile":0.15582}],"risk":0.074115,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91402"},"relatedVulnerabilities":[{"id":"CVE-2026-91402","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91402","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91402","date":"2026-11-12","epss":0.00243,"percentile":0.15582}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91402","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u503; Oracle JavaFX: 21.0.12, 25.0.4 and  27; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91402","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91402","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91402","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91402","date":"2026-11-12","epss":0.00243,"percentile":0.15582}],"risk":0.074115,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91402"},"relatedVulnerabilities":[{"id":"CVE-2026-91402","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":3.1,"impactScore":1.5,"exploitabilityScore":1.7},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91402","cwe":"CWE-693","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91402","date":"2026-11-12","epss":0.00243,"percentile":0.15582}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91402","description":"Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u503; Oracle JavaFX: 21.0.12, 25.0.4 and  27; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"db0be20435ff9026","cpes":["cpe:2.3:a:gnu:tar:1.35-r5:*:*:*:*:*:*:*","cpe:2.3:a:tar:tar:1.35-r5:*:*:*:*:*:*:*"],"name":"tar","purl":"pkg:apk/alpine/tar@1.35-r5?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.35-r5","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/tar"},{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/rmt"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"tar"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:tar:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-18508","versionConstraint":"= 1.35 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:tar:1.35:*:*:*:*:*:*:*"],"package":{"name":"tar","version":"1.35-r5"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-18508","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","metrics":{"baseScore":4.4,"impactScore":2.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18508","cwe":"CWE-59","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-18508","date":"2026-11-12","epss":0.00141,"percentile":0.03484}],"risk":0.06627,"urls":["https://access.redhat.com/errata/RHSA-2026:50807","https://access.redhat.com/errata/RHSA-2026:61581","https://access.redhat.com/errata/RHSA-2026:61586","https://access.redhat.com/errata/RHSA-2026:61783","https://access.redhat.com/errata/RHSA-2026:66018","https://access.redhat.com/errata/RHSA-2026:70390","https://access.redhat.com/security/cve/CVE-2026-18508","https://bugzilla.redhat.com/show_bug.cgi?id=2509843"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-18508","description":"A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level directory and may resolve relative to the extraction working directory. A crafted archive can create hardlinks that escape the intended boundary and, when combined with a preexisting symbolic link under the working directory, may allow writing outside that boundary during a single extraction."},"relatedVulnerabilities":[]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91461","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91461","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91461","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91461","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91461","date":"2026-11-12","epss":0.00187,"percentile":0.08437}],"risk":0.06264499999999999,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91461"},"relatedVulnerabilities":[{"id":"CVE-2026-91461","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91461","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91461","date":"2026-11-12","epss":0.00187,"percentile":0.08437}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91461","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91461","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91461","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91461","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91461","date":"2026-11-12","epss":0.00187,"percentile":0.08437}],"risk":0.06264499999999999,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91461"},"relatedVulnerabilities":[{"id":"CVE-2026-91461","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91461","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91461","date":"2026-11-12","epss":0.00187,"percentile":0.08437}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91461","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91461","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91461","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91461","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91461","date":"2026-11-12","epss":0.00187,"percentile":0.08437}],"risk":0.06264499999999999,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91461"},"relatedVulnerabilities":[{"id":"CVE-2026-91461","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91461","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91461","date":"2026-11-12","epss":0.00187,"percentile":0.08437}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91461","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91461","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91461","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91461","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91461","date":"2026-11-12","epss":0.00187,"percentile":0.08437}],"risk":0.06264499999999999,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91461"},"relatedVulnerabilities":[{"id":"CVE-2026-91461","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91461","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91461","date":"2026-11-12","epss":0.00187,"percentile":0.08437}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91461","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91461","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91461","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91461","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91461","date":"2026-11-12","epss":0.00187,"percentile":0.08437}],"risk":0.06264499999999999,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91461"},"relatedVulnerabilities":[{"id":"CVE-2026-91461","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91461","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91461","date":"2026-11-12","epss":0.00187,"percentile":0.08437}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91461","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91461","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91461","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91461","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91461","date":"2026-11-12","epss":0.00187,"percentile":0.08437}],"risk":0.06264499999999999,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91461"},"relatedVulnerabilities":[{"id":"CVE-2026-91461","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91461","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91461","date":"2026-11-12","epss":0.00187,"percentile":0.08437}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91461","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91461","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91461","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91461","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91461","date":"2026-11-12","epss":0.00187,"percentile":0.08437}],"risk":0.06264499999999999,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91461"},"relatedVulnerabilities":[{"id":"CVE-2026-91461","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N","metrics":{"baseScore":3.7,"impactScore":1.5,"exploitabilityScore":2.3},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91461","cwe":"CWE-295","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91461","date":"2026-11-12","epss":0.00187,"percentile":0.08437}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91461","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91379","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91379","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91379","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91379","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91379","date":"2026-11-12","epss":0.00122,"percentile":0.02018}],"risk":0.05916999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91379"},"relatedVulnerabilities":[{"id":"CVE-2026-91379","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91379","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91379","date":"2026-11-12","epss":0.00122,"percentile":0.02018}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91379","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDK tools).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 4.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91379","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91379","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91379","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91379","date":"2026-11-12","epss":0.00122,"percentile":0.02018}],"risk":0.05916999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91379"},"relatedVulnerabilities":[{"id":"CVE-2026-91379","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91379","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91379","date":"2026-11-12","epss":0.00122,"percentile":0.02018}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91379","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDK tools).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 4.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91379","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91379","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91379","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91379","date":"2026-11-12","epss":0.00122,"percentile":0.02018}],"risk":0.05916999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91379"},"relatedVulnerabilities":[{"id":"CVE-2026-91379","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91379","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91379","date":"2026-11-12","epss":0.00122,"percentile":0.02018}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91379","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDK tools).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 4.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91379","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91379","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91379","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91379","date":"2026-11-12","epss":0.00122,"percentile":0.02018}],"risk":0.05916999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91379"},"relatedVulnerabilities":[{"id":"CVE-2026-91379","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91379","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91379","date":"2026-11-12","epss":0.00122,"percentile":0.02018}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91379","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDK tools).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 4.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91379","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91379","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91379","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91379","date":"2026-11-12","epss":0.00122,"percentile":0.02018}],"risk":0.05916999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91379"},"relatedVulnerabilities":[{"id":"CVE-2026-91379","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91379","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91379","date":"2026-11-12","epss":0.00122,"percentile":0.02018}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91379","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDK tools).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 4.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91379","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91379","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91379","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91379","date":"2026-11-12","epss":0.00122,"percentile":0.02018}],"risk":0.05916999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91379"},"relatedVulnerabilities":[{"id":"CVE-2026-91379","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91379","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91379","date":"2026-11-12","epss":0.00122,"percentile":0.02018}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91379","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDK tools).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 4.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91379","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91379","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91379","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91379","date":"2026-11-12","epss":0.00122,"percentile":0.02018}],"risk":0.05916999999999999,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91379"},"relatedVulnerabilities":[{"id":"CVE-2026-91379","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91379","cwe":"CWE-416","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91379","date":"2026-11-12","epss":0.00122,"percentile":0.02018}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91379","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDK tools).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 4.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91335","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91335","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91335","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.6,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91335","cwe":"CWE-250","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91335","date":"2026-11-12","epss":0.0021,"percentile":0.11241}],"risk":0.0588,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91335"},"relatedVulnerabilities":[{"id":"CVE-2026-91335","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.6,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91335","cwe":"CWE-250","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91335","date":"2026-11-12","epss":0.0021,"percentile":0.11241}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91335","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91335","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91335","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.6,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91335","cwe":"CWE-250","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91335","date":"2026-11-12","epss":0.0021,"percentile":0.11241}],"risk":0.0588,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91335"},"relatedVulnerabilities":[{"id":"CVE-2026-91335","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.6,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91335","cwe":"CWE-250","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91335","date":"2026-11-12","epss":0.0021,"percentile":0.11241}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91335","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91335","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91335","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.6,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91335","cwe":"CWE-250","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91335","date":"2026-11-12","epss":0.0021,"percentile":0.11241}],"risk":0.0588,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91335"},"relatedVulnerabilities":[{"id":"CVE-2026-91335","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.6,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91335","cwe":"CWE-250","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91335","date":"2026-11-12","epss":0.0021,"percentile":0.11241}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91335","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91335","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91335","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.6,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91335","cwe":"CWE-250","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91335","date":"2026-11-12","epss":0.0021,"percentile":0.11241}],"risk":0.0588,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91335"},"relatedVulnerabilities":[{"id":"CVE-2026-91335","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.6,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91335","cwe":"CWE-250","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91335","date":"2026-11-12","epss":0.0021,"percentile":0.11241}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91335","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91335","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91335","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.6,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91335","cwe":"CWE-250","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91335","date":"2026-11-12","epss":0.0021,"percentile":0.11241}],"risk":0.0588,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91335"},"relatedVulnerabilities":[{"id":"CVE-2026-91335","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.6,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91335","cwe":"CWE-250","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91335","date":"2026-11-12","epss":0.0021,"percentile":0.11241}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91335","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91335","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91335","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.6,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91335","cwe":"CWE-250","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91335","date":"2026-11-12","epss":0.0021,"percentile":0.11241}],"risk":0.0588,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91335"},"relatedVulnerabilities":[{"id":"CVE-2026-91335","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.6,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91335","cwe":"CWE-250","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91335","date":"2026-11-12","epss":0.0021,"percentile":0.11241}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91335","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91335","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91335","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.6,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91335","cwe":"CWE-250","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91335","date":"2026-11-12","epss":0.0021,"percentile":0.11241}],"risk":0.0588,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91335"},"relatedVulnerabilities":[{"id":"CVE-2026-91335","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.6,"impactScore":1.5,"exploitabilityScore":1.2},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91335","cwe":"CWE-250","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91335","date":"2026-11-12","epss":0.0021,"percentile":0.11241}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91335","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.6 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N)."}]},{"artifact":{"id":"fa2a8d27b3bb32ed","cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-project:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*"],"name":"alsa-lib","purl":"pkg:apk/alpine/alsa-lib@1.2.15.3-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.2.15.3-r0","language":"","licenses":["LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/alsa"},{"path":"/etc/alsa/conf.d"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/aserver"},{"path":"/usr/lib"},{"path":"/usr/lib/libasound.so.2"},{"path":"/usr/lib/libasound.so.2.0.0"},{"path":"/usr/lib/libatopology.so.2"},{"path":"/usr/lib/libatopology.so.2.0.0"},{"path":"/usr/share"},{"path":"/usr/share/alsa"},{"path":"/usr/share/alsa/alsa.conf"},{"path":"/usr/share/alsa/cards"},{"path":"/usr/share/alsa/cards/AACI.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-MODEM.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-SPDMA.conf"},{"path":"/usr/share/alsa/cards/ATIIXP.conf"},{"path":"/usr/share/alsa/cards/AU8810.conf"},{"path":"/usr/share/alsa/cards/AU8820.conf"},{"path":"/usr/share/alsa/cards/AU8830.conf"},{"path":"/usr/share/alsa/cards/Audigy.conf"},{"path":"/usr/share/alsa/cards/Audigy2.conf"},{"path":"/usr/share/alsa/cards/Aureon51.conf"},{"path":"/usr/share/alsa/cards/Aureon71.conf"},{"path":"/usr/share/alsa/cards/CA0106.conf"},{"path":"/usr/share/alsa/cards/CMI8338-SWIEC.conf"},{"path":"/usr/share/alsa/cards/CMI8338.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC6.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC8.conf"},{"path":"/usr/share/alsa/cards/CMI8788.conf"},{"path":"/usr/share/alsa/cards/CS46xx.conf"},{"path":"/usr/share/alsa/cards/EMU10K1.conf"},{"path":"/usr/share/alsa/cards/EMU10K1X.conf"},{"path":"/usr/share/alsa/cards/ENS1370.conf"},{"path":"/usr/share/alsa/cards/ENS1371.conf"},{"path":"/usr/share/alsa/cards/ES1968.conf"},{"path":"/usr/share/alsa/cards/Echo_Echo3G.conf"},{"path":"/usr/share/alsa/cards/FM801.conf"},{"path":"/usr/share/alsa/cards/FWSpeakers.conf"},{"path":"/usr/share/alsa/cards/FireWave.conf"},{"path":"/usr/share/alsa/cards/GUS.conf"},{"path":"/usr/share/alsa/cards/HDA-Intel.conf"},{"path":"/usr/share/alsa/cards/HdmiLpeAudio.conf"},{"path":"/usr/share/alsa/cards/ICE1712.conf"},{"path":"/usr/share/alsa/cards/ICE1724.conf"},{"path":"/usr/share/alsa/cards/ICH-MODEM.conf"},{"path":"/usr/share/alsa/cards/ICH.conf"},{"path":"/usr/share/alsa/cards/ICH4.conf"},{"path":"/usr/share/alsa/cards/Loopback.conf"},{"path":"/usr/share/alsa/cards/Maestro3.conf"},{"path":"/usr/share/alsa/cards/NFORCE.conf"},{"path":"/usr/share/alsa/cards/PC-Speaker.conf"},{"path":"/usr/share/alsa/cards/PMac.conf"},{"path":"/usr/share/alsa/cards/PMacToonie.conf"},{"path":"/usr/share/alsa/cards/PS3.conf"},{"path":"/usr/share/alsa/cards/RME9636.conf"},{"path":"/usr/share/alsa/cards/RME9652.conf"},{"path":"/usr/share/alsa/cards/SB-XFi.conf"},{"path":"/usr/share/alsa/cards/SI7018.conf"},{"path":"/usr/share/alsa/cards/TRID4DWAVENX.conf"},{"path":"/usr/share/alsa/cards/USB-Audio.conf"},{"path":"/usr/share/alsa/cards/VIA686A.conf"},{"path":"/usr/share/alsa/cards/VIA8233.conf"},{"path":"/usr/share/alsa/cards/VIA8233A.conf"},{"path":"/usr/share/alsa/cards/VIA8237.conf"},{"path":"/usr/share/alsa/cards/VX222.conf"},{"path":"/usr/share/alsa/cards/VXPocket.conf"},{"path":"/usr/share/alsa/cards/VXPocket440.conf"},{"path":"/usr/share/alsa/cards/YMF744.conf"},{"path":"/usr/share/alsa/cards/aliases.conf"},{"path":"/usr/share/alsa/cards/pistachio-card.conf"},{"path":"/usr/share/alsa/cards/vc4-hdmi.conf"},{"path":"/usr/share/alsa/ctl"},{"path":"/usr/share/alsa/ctl/default.conf"},{"path":"/usr/share/alsa/pcm"},{"path":"/usr/share/alsa/pcm/center_lfe.conf"},{"path":"/usr/share/alsa/pcm/default.conf"},{"path":"/usr/share/alsa/pcm/dmix.conf"},{"path":"/usr/share/alsa/pcm/dpl.conf"},{"path":"/usr/share/alsa/pcm/dsnoop.conf"},{"path":"/usr/share/alsa/pcm/front.conf"},{"path":"/usr/share/alsa/pcm/hdmi.conf"},{"path":"/usr/share/alsa/pcm/iec958.conf"},{"path":"/usr/share/alsa/pcm/modem.conf"},{"path":"/usr/share/alsa/pcm/rear.conf"},{"path":"/usr/share/alsa/pcm/side.conf"},{"path":"/usr/share/alsa/pcm/surround21.conf"},{"path":"/usr/share/alsa/pcm/surround40.conf"},{"path":"/usr/share/alsa/pcm/surround41.conf"},{"path":"/usr/share/alsa/pcm/surround50.conf"},{"path":"/usr/share/alsa/pcm/surround51.conf"},{"path":"/usr/share/alsa/pcm/surround71.conf"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"alsa-lib"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-96674","versionConstraint":"<= 1.2.16.1 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.15.3:*:*:*:*:*:*:*"],"package":{"name":"alsa-lib","version":"1.2.15.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-96674","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L","metrics":{"baseScore":4.4,"impactScore":2.6,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-96674","cwe":"CWE-190","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-96674","date":"2026-11-12","epss":0.00115,"percentile":0.01574}],"risk":0.0552,"urls":["https://github.com/alsa-project/alsa-lib","https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/topology/ctl.c#L1316-L1326","https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/topology/ctl.c#L1420-L1430","https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/topology/ctl.c#L1511-L1521","https://github.com/alsa-project/alsa-lib/pull/527","https://www.vulncheck.com/advisories/alsa-lib-through-1.2.16.1-integer-overflow-via-topology-file"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-96674","description":"alsa-lib through 1.2.16.1 computes combined topology element size using 32-bit arithmetic in src/topology/ctl.c, allowing integer overflow that defeats bounds checks. Attackers can supply crafted topology files that wrap size calculations, causing the decoder to read beyond the topology buffer and potentially leak sensitive data or crash the application."},"relatedVulnerabilities":[]},{"artifact":{"id":"fa2a8d27b3bb32ed","cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-project:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_project:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa-lib:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa_lib:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa-lib:1.2.15.3-r0:*:*:*:*:*:*:*","cpe:2.3:a:alsa:alsa_lib:1.2.15.3-r0:*:*:*:*:*:*:*"],"name":"alsa-lib","purl":"pkg:apk/alpine/alsa-lib@1.2.15.3-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.2.15.3-r0","language":"","licenses":["LGPL-2.1-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/etc"},{"path":"/etc/alsa"},{"path":"/etc/alsa/conf.d"},{"path":"/usr"},{"path":"/usr/bin"},{"path":"/usr/bin/aserver"},{"path":"/usr/lib"},{"path":"/usr/lib/libasound.so.2"},{"path":"/usr/lib/libasound.so.2.0.0"},{"path":"/usr/lib/libatopology.so.2"},{"path":"/usr/lib/libatopology.so.2.0.0"},{"path":"/usr/share"},{"path":"/usr/share/alsa"},{"path":"/usr/share/alsa/alsa.conf"},{"path":"/usr/share/alsa/cards"},{"path":"/usr/share/alsa/cards/AACI.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-MODEM.conf"},{"path":"/usr/share/alsa/cards/ATIIXP-SPDMA.conf"},{"path":"/usr/share/alsa/cards/ATIIXP.conf"},{"path":"/usr/share/alsa/cards/AU8810.conf"},{"path":"/usr/share/alsa/cards/AU8820.conf"},{"path":"/usr/share/alsa/cards/AU8830.conf"},{"path":"/usr/share/alsa/cards/Audigy.conf"},{"path":"/usr/share/alsa/cards/Audigy2.conf"},{"path":"/usr/share/alsa/cards/Aureon51.conf"},{"path":"/usr/share/alsa/cards/Aureon71.conf"},{"path":"/usr/share/alsa/cards/CA0106.conf"},{"path":"/usr/share/alsa/cards/CMI8338-SWIEC.conf"},{"path":"/usr/share/alsa/cards/CMI8338.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC6.conf"},{"path":"/usr/share/alsa/cards/CMI8738-MC8.conf"},{"path":"/usr/share/alsa/cards/CMI8788.conf"},{"path":"/usr/share/alsa/cards/CS46xx.conf"},{"path":"/usr/share/alsa/cards/EMU10K1.conf"},{"path":"/usr/share/alsa/cards/EMU10K1X.conf"},{"path":"/usr/share/alsa/cards/ENS1370.conf"},{"path":"/usr/share/alsa/cards/ENS1371.conf"},{"path":"/usr/share/alsa/cards/ES1968.conf"},{"path":"/usr/share/alsa/cards/Echo_Echo3G.conf"},{"path":"/usr/share/alsa/cards/FM801.conf"},{"path":"/usr/share/alsa/cards/FWSpeakers.conf"},{"path":"/usr/share/alsa/cards/FireWave.conf"},{"path":"/usr/share/alsa/cards/GUS.conf"},{"path":"/usr/share/alsa/cards/HDA-Intel.conf"},{"path":"/usr/share/alsa/cards/HdmiLpeAudio.conf"},{"path":"/usr/share/alsa/cards/ICE1712.conf"},{"path":"/usr/share/alsa/cards/ICE1724.conf"},{"path":"/usr/share/alsa/cards/ICH-MODEM.conf"},{"path":"/usr/share/alsa/cards/ICH.conf"},{"path":"/usr/share/alsa/cards/ICH4.conf"},{"path":"/usr/share/alsa/cards/Loopback.conf"},{"path":"/usr/share/alsa/cards/Maestro3.conf"},{"path":"/usr/share/alsa/cards/NFORCE.conf"},{"path":"/usr/share/alsa/cards/PC-Speaker.conf"},{"path":"/usr/share/alsa/cards/PMac.conf"},{"path":"/usr/share/alsa/cards/PMacToonie.conf"},{"path":"/usr/share/alsa/cards/PS3.conf"},{"path":"/usr/share/alsa/cards/RME9636.conf"},{"path":"/usr/share/alsa/cards/RME9652.conf"},{"path":"/usr/share/alsa/cards/SB-XFi.conf"},{"path":"/usr/share/alsa/cards/SI7018.conf"},{"path":"/usr/share/alsa/cards/TRID4DWAVENX.conf"},{"path":"/usr/share/alsa/cards/USB-Audio.conf"},{"path":"/usr/share/alsa/cards/VIA686A.conf"},{"path":"/usr/share/alsa/cards/VIA8233.conf"},{"path":"/usr/share/alsa/cards/VIA8233A.conf"},{"path":"/usr/share/alsa/cards/VIA8237.conf"},{"path":"/usr/share/alsa/cards/VX222.conf"},{"path":"/usr/share/alsa/cards/VXPocket.conf"},{"path":"/usr/share/alsa/cards/VXPocket440.conf"},{"path":"/usr/share/alsa/cards/YMF744.conf"},{"path":"/usr/share/alsa/cards/aliases.conf"},{"path":"/usr/share/alsa/cards/pistachio-card.conf"},{"path":"/usr/share/alsa/cards/vc4-hdmi.conf"},{"path":"/usr/share/alsa/ctl"},{"path":"/usr/share/alsa/ctl/default.conf"},{"path":"/usr/share/alsa/pcm"},{"path":"/usr/share/alsa/pcm/center_lfe.conf"},{"path":"/usr/share/alsa/pcm/default.conf"},{"path":"/usr/share/alsa/pcm/dmix.conf"},{"path":"/usr/share/alsa/pcm/dpl.conf"},{"path":"/usr/share/alsa/pcm/dsnoop.conf"},{"path":"/usr/share/alsa/pcm/front.conf"},{"path":"/usr/share/alsa/pcm/hdmi.conf"},{"path":"/usr/share/alsa/pcm/iec958.conf"},{"path":"/usr/share/alsa/pcm/modem.conf"},{"path":"/usr/share/alsa/pcm/rear.conf"},{"path":"/usr/share/alsa/pcm/side.conf"},{"path":"/usr/share/alsa/pcm/surround21.conf"},{"path":"/usr/share/alsa/pcm/surround40.conf"},{"path":"/usr/share/alsa/pcm/surround41.conf"},{"path":"/usr/share/alsa/pcm/surround50.conf"},{"path":"/usr/share/alsa/pcm/surround51.conf"},{"path":"/usr/share/alsa/pcm/surround71.conf"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"alsa-lib"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-96675","versionConstraint":"<= 1.2.16.1 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:alsa-project:alsa-lib:1.2.15.3:*:*:*:*:*:*:*"],"package":{"name":"alsa-lib","version":"1.2.15.3-r0"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-96675","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","metrics":{"baseScore":4.8},"version":"4.0","vendorMetadata":{}},{"type":"Secondary","source":"disclosure@vulncheck.com","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","metrics":{"baseScore":3.3,"impactScore":1.5,"exploitabilityScore":1.9},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-96675","cwe":"CWE-129","type":"Secondary","source":"disclosure@vulncheck.com"}],"epss":[{"cve":"CVE-2026-96675","date":"2026-11-12","epss":0.00111,"percentile":0.01321}],"risk":0.05022750000000001,"urls":["https://github.com/alsa-project/alsa-lib","https://github.com/alsa-project/alsa-lib/blob/v1.2.16.1/src/pcm/pcm_multi.c#L1122-L1131","https://github.com/alsa-project/alsa-lib/pull/527","https://www.vulncheck.com/advisories/alsa-lib-through-1.2.16.1-denial-of-service-via-pcm-multi"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-96675","description":"alsa-lib through 1.2.16.1 contains a denial of service vulnerability in the multi PCM plugin that fails to validate sparse binding indices before array access. Attackers can supply a malicious ALSA configuration file with sparse bindings to trigger an out-of-bounds array read and assertion failure, causing the application to abort."},"relatedVulnerabilities":[]},{"artifact":{"id":"db0be20435ff9026","cpes":["cpe:2.3:a:gnu:tar:1.35-r5:*:*:*:*:*:*:*","cpe:2.3:a:tar:tar:1.35-r5:*:*:*:*:*:*:*"],"name":"tar","purl":"pkg:apk/alpine/tar@1.35-r5?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"1.35-r5","language":"","licenses":["GPL-3.0-or-later"],"metadata":{"Arch":"x86_64","files":[{"path":"/bin"},{"path":"/bin/tar"},{"path":"/usr"},{"path":"/usr/libexec"},{"path":"/usr/libexec/rmt"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"tar"}],"metadataType":"ApkMetadata"},"matchDetails":[{"type":"cpe-match","found":{"cpes":["cpe:2.3:a:gnu:tar:*:*:*:*:*:*:*:*"],"vulnerabilityID":"CVE-2026-18477","versionConstraint":"= 1.35 (unknown)"},"matcher":"apk-matcher","searchedBy":{"cpes":["cpe:2.3:a:gnu:tar:1.35:*:*:*:*:*:*:*"],"package":{"name":"tar","version":"1.35-r5"},"namespace":"nvd:cpe"}}],"vulnerability":{"id":"CVE-2026-18477","fix":{"state":"","versions":[]},"cvss":[{"type":"Secondary","source":"secalert@redhat.com","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.4,"impactScore":3.6,"exploitabilityScore":0.8},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-18477","cwe":"CWE-367","type":"Secondary","source":"secalert@redhat.com"}],"epss":[{"cve":"CVE-2026-18477","date":"2026-11-12","epss":0.00104,"percentile":0.01005}],"risk":0.04887999999999999,"urls":["https://access.redhat.com/errata/RHSA-2026:49361","https://access.redhat.com/errata/RHSA-2026:61581","https://access.redhat.com/errata/RHSA-2026:61586","https://access.redhat.com/errata/RHSA-2026:61783","https://access.redhat.com/errata/RHSA-2026:66018","https://access.redhat.com/errata/RHSA-2026:70390","https://access.redhat.com/security/cve/CVE-2026-18477","https://bugzilla.redhat.com/show_bug.cgi?id=2509735"],"severity":"Medium","namespace":"nvd:cpe","advisories":[],"dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-18477","description":"A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory being backed up to influence the restore process if the attacker has access to the system where the restore is being performed. During restoration, files or directories may be created, renamed or overwritten outside the intended extraction directory. This could lead to unauthorized file modification or, in some cases, privilege escalation. Exploitation does not require the attacker to modify or craft the archive, and standard backup and restore workflows—including extracting into a newly created directory without using the -P option do not mitigate the issue."},"relatedVulnerabilities":[]},{"artifact":{"id":"8de79d211419e1a7","cpes":["cpe:2.3:a:apache:shiro-core:1.13.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:shiro_core:1.13.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:shiro:1.13.0:*:*:*:*:*:*:*","cpe:2.3:a:apache:core:1.13.0:*:*:*:*:*:*:*"],"name":"shiro-core","purl":"pkg:maven/org.apache.shiro/shiro-core@1.13.0","type":"java-archive","version":"1.13.0","language":"java","licenses":["https://www.apache.org/licenses/LICENSE-2.0.txt"],"metadata":{"pomGroupID":"org.apache.shiro","virtualPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/shiro-core-1.13.0.jar","manifestName":"","pomArtifactID":"shiro-core","archiveDigests":[{"value":"7e542e3d614b197bf10005e98e19f9f19cb943e7","algorithm":"sha1"}]},"locations":[{"path":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar","layerID":"sha256:781f79d877e532afdca9d6d4f604313f89283bb748dde4e3ff5364f1319e2059","accessPath":"/opt/sonatype/nexus/bin/sonatype-nexus-repository-3.93.3-03.jar:BOOT-INF/lib/shiro-core-1.13.0.jar","annotations":{"evidence":"primary"}}],"upstreams":[],"metadataType":"JavaMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"2.1.0"},"type":"exact-direct-match","found":{"vulnerabilityID":"GHSA-c4qc-4q9p-m9q9","versionConstraint":"<2.1.0 (unknown)"},"matcher":"java-matcher","searchedBy":{"package":{"name":"org.apache.shiro:shiro-core","version":"1.13.0"},"language":"java","namespace":"github:language:java"}}],"vulnerability":{"id":"GHSA-c4qc-4q9p-m9q9","fix":{"state":"fixed","versions":["2.1.0"],"available":[{"date":"2026-02-10","kind":"first-observed","version":"2.1.0"}]},"cvss":[{"type":"Secondary","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N","metrics":{"baseScore":1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-23901","cwe":"CWE-208","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-23901","date":"2026-11-12","epss":0.0023,"percentile":0.13993}],"risk":0.046,"urls":["https://nvd.nist.gov/vuln/detail/CVE-2026-23901","https://lists.apache.org/thread/mm1jct9b86jvnh3y44tj22xvjtx3xhhh","http://www.openwall.com/lists/oss-security/2026/02/08/2"],"severity":"Low","namespace":"github:language:java","advisories":[],"dataSource":"https://github.com/advisories/GHSA-c4qc-4q9p-m9q9","description":"Apache Shiro Affected by an Observable Timing Discrepancy Vulnerability"},"relatedVulnerabilities":[{"id":"CVE-2026-23901","cvss":[{"type":"Primary","source":"nvd@nist.gov","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","metrics":{"baseScore":2.5,"impactScore":1.5,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}},{"type":"Secondary","source":"security@apache.org","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:Y/R:A/V:C/RE:L/U:Green","metrics":{"baseScore":1},"version":"4.0","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-23901","cwe":"CWE-208","type":"Secondary","source":"security@apache.org"}],"epss":[{"cve":"CVE-2026-23901","date":"2026-11-12","epss":0.0023,"percentile":0.13993}],"urls":["https://lists.apache.org/thread/mm1jct9b86jvnh3y44tj22xvjtx3xhhh","http://www.openwall.com/lists/oss-security/2026/02/08/2"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-23901","description":"Observable Timing Discrepancy vulnerability in Apache Shiro.\n\nThis issue affects Apache Shiro: from 1.*, 2.* before 2.0.7.\n\nUsers are recommended to upgrade to version 2.0.7 or later, which fixes the issue.\n\nPrior to Shiro 2.0.7, code paths for non-existent vs. existing users are different enough,\nthat a brute-force attack may be able to tell, by timing the requests only, determine if\nthe request failed because of a non-existent user vs. wrong password.\n\nThe most likely attack vector is a local attack only.\nShiro security model  https://shiro.apache.org/security-model.html#username_enumeration  discusses this as well.\n\nTypically, brute force attack can be mitigated at the infrastructure level."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91375","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91375","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91375","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91375","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91375","date":"2026-11-12","epss":0.00092,"percentile":0.00509}],"risk":0.04462,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91375"},"relatedVulnerabilities":[{"id":"CVE-2026-91375","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91375","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91375","date":"2026-11-12","epss":0.00092,"percentile":0.00509}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91375","description":"Vulnerability in Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91375","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91375","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91375","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91375","date":"2026-11-12","epss":0.00092,"percentile":0.00509}],"risk":0.04462,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91375"},"relatedVulnerabilities":[{"id":"CVE-2026-91375","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91375","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91375","date":"2026-11-12","epss":0.00092,"percentile":0.00509}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91375","description":"Vulnerability in Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91375","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91375","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91375","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91375","date":"2026-11-12","epss":0.00092,"percentile":0.00509}],"risk":0.04462,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91375"},"relatedVulnerabilities":[{"id":"CVE-2026-91375","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91375","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91375","date":"2026-11-12","epss":0.00092,"percentile":0.00509}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91375","description":"Vulnerability in Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91375","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91375","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91375","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91375","date":"2026-11-12","epss":0.00092,"percentile":0.00509}],"risk":0.04462,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91375"},"relatedVulnerabilities":[{"id":"CVE-2026-91375","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91375","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91375","date":"2026-11-12","epss":0.00092,"percentile":0.00509}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91375","description":"Vulnerability in Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91375","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91375","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91375","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91375","date":"2026-11-12","epss":0.00092,"percentile":0.00509}],"risk":0.04462,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91375"},"relatedVulnerabilities":[{"id":"CVE-2026-91375","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91375","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91375","date":"2026-11-12","epss":0.00092,"percentile":0.00509}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91375","description":"Vulnerability in Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91375","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91375","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91375","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91375","date":"2026-11-12","epss":0.00092,"percentile":0.00509}],"risk":0.04462,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91375"},"relatedVulnerabilities":[{"id":"CVE-2026-91375","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91375","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91375","date":"2026-11-12","epss":0.00092,"percentile":0.00509}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91375","description":"Vulnerability in Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91375","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91375","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91375","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91375","date":"2026-11-12","epss":0.00092,"percentile":0.00509}],"risk":0.04462,"urls":[],"severity":"Medium","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91375"},"relatedVulnerabilities":[{"id":"CVE-2026-91375","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","metrics":{"baseScore":4.7,"impactScore":3.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91375","cwe":"CWE-863","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91375","date":"2026-11-12","epss":0.00092,"percentile":0.00509}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Medium","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91375","description":"Vulnerability in Oracle Java SE (component: Libraries).  Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)."}]},{"artifact":{"id":"d4ab3efc304a4e30","cpes":["cpe:2.3:a:openjdk21:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk21:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:oracle:openjdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21","purl":"pkg:apk/alpine/openjdk21@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-direct-match","found":{"vulnerabilityID":"CVE-2026-91397","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}},{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91397","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91397","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91397","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91397","date":"2026-11-12","epss":0.00095,"percentile":0.00589}],"risk":0.031349999999999996,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91397"},"relatedVulnerabilities":[{"id":"CVE-2026-91397","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91397","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91397","date":"2026-11-12","epss":0.00095,"percentile":0.00589}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91397","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.6 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L)."}]},{"artifact":{"id":"3d8ba365fb5222eb","cpes":["cpe:2.3:a:openjdk21-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_demos:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-demos:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_demos:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-demos","purl":"pkg:apk/alpine/openjdk21-demos@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/demo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/README"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/CodePointIM.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_ja.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/README_zh_CN.html"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/CodePointIM/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/FileChooserDemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/FileChooserDemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/Font2DTest.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Font2DTest/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/J2Ddemo.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/J2Ddemo/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/Metalworks.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Metalworks/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/Notepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Notepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/SampleTree.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SampleTree/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/Stylepad.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/Stylepad/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/SwingSet2.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/SwingSet2/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/TableExample.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TableExample/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/TransparentRuler.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/jfc/TransparentRuler/src.zip"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/FileChooserDemo/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Font2DTest/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Metalworks/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/Notepad/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/SampleTree/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TableExample/nbproject/project.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/build.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/file-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/jdk.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/netbeans-targets.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/demo/nbproject/jfc/TransparentRuler/nbproject/project.xml"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91397","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91397","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91397","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91397","date":"2026-11-12","epss":0.00095,"percentile":0.00589}],"risk":0.031349999999999996,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91397"},"relatedVulnerabilities":[{"id":"CVE-2026-91397","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91397","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91397","date":"2026-11-12","epss":0.00095,"percentile":0.00589}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91397","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.6 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L)."}]},{"artifact":{"id":"2dd9617936ed7f4f","cpes":["cpe:2.3:a:openjdk21-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_doc:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-doc:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_doc:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-doc","purl":"pkg:apk/alpine/openjdk21-doc@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/man"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jar.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jarsigner.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/java.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javac.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javadoc.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/javap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jcmd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jconsole.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeprscan.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jdeps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jfr.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jhsdb.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jinfo.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jlink.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmap.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jmod.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jpackage.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jps.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jrunscript.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jshell.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstack.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstat.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jstatd.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/jwebserver.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/keytool.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/rmiregistry.1"},{"path":"/usr/lib/jvm/java-21-openjdk/man/man1/serialver.1"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91397","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91397","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91397","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91397","date":"2026-11-12","epss":0.00095,"percentile":0.00589}],"risk":0.031349999999999996,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91397"},"relatedVulnerabilities":[{"id":"CVE-2026-91397","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91397","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91397","date":"2026-11-12","epss":0.00095,"percentile":0.00589}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91397","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.6 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L)."}]},{"artifact":{"id":"7239883c27ef8651","cpes":["cpe:2.3:a:openjdk21-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jdk:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jdk:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jdk","purl":"pkg:apk/alpine/openjdk21-jdk@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jar"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jarsigner"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javac"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/javap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeprscan"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jhsdb"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jimage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jinfo"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmap"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jps"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstack"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstat"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/serialver"},{"path":"/usr/lib/jvm/java-21-openjdk/include"},{"path":"/usr/lib/jvm/java-21-openjdk/include/classfile_constants.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jawt.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jdwpTransport.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jni.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmti.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/jvmticmlr.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jawt_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/include/linux/jni_md.h"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/ct.sym"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91397","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91397","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91397","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91397","date":"2026-11-12","epss":0.00095,"percentile":0.00589}],"risk":0.031349999999999996,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91397"},"relatedVulnerabilities":[{"id":"CVE-2026-91397","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91397","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91397","date":"2026-11-12","epss":0.00095,"percentile":0.00589}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91397","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.6 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L)."}]},{"artifact":{"id":"cf54d4e40396d00a","cpes":["cpe:2.3:a:openjdk21-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jmods:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jmods:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jmods:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jmods","purl":"pkg:apk/alpine/openjdk21-jmods@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.base.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.datatransfer.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.instrument.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.logging.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.management.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.naming.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.net.http.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.prefs.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.scripting.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.se.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.security.sasl.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.smartcardio.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.sql.rowset.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.transaction.xa.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.crypto.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/java.xml.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.accessibility.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.attach.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.charsets.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.cryptoki.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.crypto.ec.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.dynalink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.editpad.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.hotspot.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.httpserver.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.incubator.vector.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.ed.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.jvmstat.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.le.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.opt.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.ci.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.internal.vm.compiler.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jartool.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.javadoc.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jcmd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jconsole.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdeps.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jdwp.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jlink.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jpackage.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jshell.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jsobject.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.jstatd.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.localedata.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.agent.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jfr.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.management.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.dns.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.naming.rmi.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.net.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.nio.mapmode.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.random.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.sctp.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.auth.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.security.jgss.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.desktop.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.unsupported.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.xml.dom.jmod"},{"path":"/usr/lib/jvm/java-21-openjdk/jmods/jdk.zipfs.jmod"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91397","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91397","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91397","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91397","date":"2026-11-12","epss":0.00095,"percentile":0.00589}],"risk":0.031349999999999996,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91397"},"relatedVulnerabilities":[{"id":"CVE-2026-91397","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91397","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91397","date":"2026-11-12","epss":0.00095,"percentile":0.00589}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91397","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.6 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L)."}]},{"artifact":{"id":"87f4d452fe545ec9","cpes":["cpe:2.3:a:openjdk21-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre","purl":"pkg:apk/alpine/openjdk21-jre@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_xawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libfontmanager.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjavajpeg.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsound.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/liblcms.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsplashscreen.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91397","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91397","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91397","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91397","date":"2026-11-12","epss":0.00095,"percentile":0.00589}],"risk":0.031349999999999996,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91397"},"relatedVulnerabilities":[{"id":"CVE-2026-91397","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91397","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91397","date":"2026-11-12","epss":0.00095,"percentile":0.00589}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91397","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.6 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L)."}]},{"artifact":{"id":"8d1007392597bf3c","cpes":["cpe:2.3:a:openjdk21-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre-headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre_headless:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk-jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk_jre:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk21:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk21_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk-jre-headless:21.0.12_p8-r0:*:*:*:*:*:*:*","cpe:2.3:a:openjdk:openjdk_jre_headless:21.0.12_p8-r0:*:*:*:*:*:*:*"],"name":"openjdk21-jre-headless","purl":"pkg:apk/alpine/openjdk21-jre-headless@21.0.12_p8-r0?arch=x86_64&distro=alpine-3.24.3&upstream=openjdk21","type":"apk","version":"21.0.12_p8-r0","language":"","licenses":["GPL-2.0-with-classpath-exception"],"metadata":{"Arch":"x86_64","files":[{"path":"/usr"},{"path":"/usr/lib"},{"path":"/usr/lib/jvm"},{"path":"/usr/lib/jvm/java-21-openjdk"},{"path":"/usr/lib/jvm/java-21-openjdk/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/README.md"},{"path":"/usr/lib/jvm/java-21-openjdk/jre"},{"path":"/usr/lib/jvm/java-21-openjdk/release"},{"path":"/usr/lib/jvm/java-21-openjdk/bin"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/java"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jrunscript"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/jwebserver"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/keytool"},{"path":"/usr/lib/jvm/java-21-openjdk/bin/rmiregistry"},{"path":"/usr/lib/jvm/java-21-openjdk/conf"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/jaxp.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/logging.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/net.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sound.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.access"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/jmxremote.password.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/management/management.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/sdp/sdp.conf.template"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/java.security"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/README.txt"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/limited/exempt_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_US_export.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/conf/security/policy/unlimited/default_local.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/legal"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/aes.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/asm.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/c-libutl.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/gcc.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/icu.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/public_suffix.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/siphash.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.base/unicode.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.datatransfer/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/colorimaging.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/harfbuzz.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/mesa3d.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/pipewire.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.desktop/xwd.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.instrument/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.logging/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.management.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.naming/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.net.http/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.prefs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.scripting/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.se/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.security.sasl/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.smartcardio/pcsclite.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.sql.rowset/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.transaction.xa/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/bcel.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/dom.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/jcup.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xalan.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml/xerces.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/java.xml.crypto/santuario.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.accessibility/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.attach/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.charsets/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11cryptotoken.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.cryptoki/pkcs11wrapper.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.crypto.ec/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.dynalink/dynalink.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.editpad/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.hotspot.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.httpserver/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.incubator.vector/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.ed/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.jvmstat/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.le/jline.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.opt/jopt-simple.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.ci/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.internal.vm.compiler.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jartool/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jquery.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.javadoc/jqueryUI.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jcmd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jconsole/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdeps/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jdwp.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jlink/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jpackage/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jshell/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jsobject/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.jstatd/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/cldr.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.localedata/thaidict.md"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.agent/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.management.jfr/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.dns/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.naming.rmi/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.net/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.nio.mapmode/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.random/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.sctp/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.auth/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.security.jgss/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.unsupported.desktop/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.xml.dom/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ADDITIONAL_LICENSE_INFO"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/ASSEMBLY_EXCEPTION"},{"path":"/usr/lib/jvm/java-21-openjdk/legal/jdk.zipfs/LICENSE"},{"path":"/usr/lib/jvm/java-21-openjdk/lib"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/classlist"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jexec"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jrt-fs.jar"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jspawnhelper"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jvm.cfg"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libattach.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libawt_headless.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libdt_socket.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libextnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libinstrument.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2gss.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pcsc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libj2pkcs11.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjaas.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjava.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjdwp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjimage.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjli.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libjsvml.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/lible.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_agent.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmanagement_ext.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libmlib_image.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnet.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libnio.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libprefs.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/librmi.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsaproc.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsctp.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libsyslookup.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libverify.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/libzip.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/modules"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfont.properties.ja"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/psfontj2d.properties"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/tzdb.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/default.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/jfr/profile.jfc"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/blocked.certs"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/cacerts"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/default.policy"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/security/public_suffix_list.dat"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/classes_nocoops.jsa"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjsig.so"},{"path":"/usr/lib/jvm/java-21-openjdk/lib/server/libjvm.so"}]},"locations":[{"path":"/lib/apk/db/installed","layerID":"sha256:c3d53166b37b5017bef437ace1361469b9a937248eae9186d7bdda047dbfa88b","accessPath":"/lib/apk/db/installed","annotations":{"evidence":"primary"}}],"upstreams":[{"name":"openjdk21"}],"metadataType":"ApkMetadata"},"matchDetails":[{"fix":{"suggestedVersion":"21.0.13.0.3_p1-r0"},"type":"exact-indirect-match","found":{"vulnerabilityID":"CVE-2026-91397","versionConstraint":"< 21.0.13.0.3_p1-r0 (apk)"},"matcher":"apk-matcher","searchedBy":{"distro":{"type":"alpine","version":"3.24.3"},"package":{"name":"openjdk21","version":"21.0.12_p8-r0"},"namespace":"alpine:distro:alpine:3.24"}}],"vulnerability":{"id":"CVE-2026-91397","fix":{"state":"fixed","versions":["21.0.13.0.3_p1-r0"],"available":[{"date":"2026-11-01","kind":"first-observed","version":"21.0.13.0.3_p1-r0"}]},"cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91397","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91397","date":"2026-11-12","epss":0.00095,"percentile":0.00589}],"risk":0.031349999999999996,"urls":[],"severity":"Low","namespace":"alpine:distro:alpine:3.24","advisories":[],"dataSource":"https://security.alpinelinux.org/vuln/CVE-2026-91397"},"relatedVulnerabilities":[{"id":"CVE-2026-91397","cvss":[{"type":"Secondary","source":"secalert_us@oracle.com","vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L","metrics":{"baseScore":3.6,"impactScore":2.6,"exploitabilityScore":1.1},"version":"3.1","vendorMetadata":{}}],"cwes":[{"cve":"CVE-2026-91397","cwe":"CWE-284","type":"Secondary","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"epss":[{"cve":"CVE-2026-91397","date":"2026-11-12","epss":0.00095,"percentile":0.00589}],"urls":["https://www.oracle.com/security-alerts/cpuoct2026.html"],"severity":"Low","namespace":"nvd:cpe","dataSource":"https://nvd.nist.gov/vuln/detail/CVE-2026-91397","description":"Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability).  Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and  21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.6 (Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L)."}]}],"grade":"F","score":"0.00","as_of":"2026-11-14T08:18:28.273Z","grype_db_version":"2026-11-13T15:40:34.000Z"}